./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 87a4c5e21ab7f26123006d2ec745b45fb5a5e887 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 00:30:46,702 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 00:30:46,704 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 00:30:46,711 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 00:30:46,711 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 00:30:46,712 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 00:30:46,713 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 00:30:46,714 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 00:30:46,715 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 00:30:46,715 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 00:30:46,716 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 00:30:46,716 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 00:30:46,717 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 00:30:46,718 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 00:30:46,718 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 00:30:46,719 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 00:30:46,719 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 00:30:46,721 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 00:30:46,722 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 00:30:46,723 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 00:30:46,724 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 00:30:46,725 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 00:30:46,726 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 00:30:46,727 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 00:30:46,727 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 00:30:46,727 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 00:30:46,728 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 00:30:46,729 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 00:30:46,729 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 00:30:46,730 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 00:30:46,730 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 00:30:46,731 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 00:30:46,731 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 00:30:46,731 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 00:30:46,732 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 00:30:46,732 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 00:30:46,732 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-23 00:30:46,743 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 00:30:46,743 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 00:30:46,744 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 00:30:46,744 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 00:30:46,745 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 00:30:46,745 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-23 00:30:46,745 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-23 00:30:46,745 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-23 00:30:46,745 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-23 00:30:46,745 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-23 00:30:46,745 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-23 00:30:46,746 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-23 00:30:46,746 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-23 00:30:46,747 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 00:30:46,747 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-23 00:30:46,748 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 00:30:46,748 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 00:30:46,748 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-23 00:30:46,748 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-23 00:30:46,749 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87a4c5e21ab7f26123006d2ec745b45fb5a5e887 [2018-11-23 00:30:46,775 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 00:30:46,784 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 00:30:46,787 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 00:30:46,788 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 00:30:46,788 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 00:30:46,789 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c [2018-11-23 00:30:46,834 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/data/7b76a1bd5/944fe7a7ec5f45faa6c904946edb31a2/FLAGc02cbbb63 [2018-11-23 00:30:47,254 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 00:30:47,255 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/sv-benchmarks/c/product-lines/elevator_spec3_product09_true-unreach-call_true-termination.cil.c [2018-11-23 00:30:47,270 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/data/7b76a1bd5/944fe7a7ec5f45faa6c904946edb31a2/FLAGc02cbbb63 [2018-11-23 00:30:47,592 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/data/7b76a1bd5/944fe7a7ec5f45faa6c904946edb31a2 [2018-11-23 00:30:47,594 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 00:30:47,596 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 00:30:47,596 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 00:30:47,596 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 00:30:47,599 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 00:30:47,599 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:30:47" (1/1) ... [2018-11-23 00:30:47,602 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@166d32f4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:47, skipping insertion in model container [2018-11-23 00:30:47,602 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:30:47" (1/1) ... [2018-11-23 00:30:47,608 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 00:30:47,655 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 00:30:47,999 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:30:48,071 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 00:30:48,155 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:30:48,191 INFO L195 MainTranslator]: Completed translation [2018-11-23 00:30:48,191 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48 WrapperNode [2018-11-23 00:30:48,191 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 00:30:48,192 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 00:30:48,192 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 00:30:48,192 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 00:30:48,196 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,212 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,373 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 00:30:48,374 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 00:30:48,374 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 00:30:48,374 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 00:30:48,383 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,383 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,408 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,408 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,462 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,521 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,540 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... [2018-11-23 00:30:48,575 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 00:30:48,576 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 00:30:48,576 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 00:30:48,576 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 00:30:48,577 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:30:48,629 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 00:30:48,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 00:30:48,629 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 00:30:48,629 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 00:30:54,127 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 00:30:54,128 INFO L280 CfgBuilder]: Removed 1227 assue(true) statements. [2018-11-23 00:30:54,128 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:30:54 BoogieIcfgContainer [2018-11-23 00:30:54,128 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 00:30:54,129 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-23 00:30:54,129 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-23 00:30:54,131 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-23 00:30:54,132 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-23 00:30:54,132 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 23.11 12:30:47" (1/3) ... [2018-11-23 00:30:54,133 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5047b82a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 23.11 12:30:54, skipping insertion in model container [2018-11-23 00:30:54,133 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-23 00:30:54,133 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:30:48" (2/3) ... [2018-11-23 00:30:54,133 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5047b82a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 23.11 12:30:54, skipping insertion in model container [2018-11-23 00:30:54,133 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-23 00:30:54,134 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:30:54" (3/3) ... [2018-11-23 00:30:54,135 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product09_true-unreach-call_true-termination.cil.c [2018-11-23 00:30:54,173 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 00:30:54,174 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-23 00:30:54,174 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-23 00:30:54,174 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-23 00:30:54,174 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 00:30:54,174 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 00:30:54,175 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-23 00:30:54,175 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 00:30:54,175 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-23 00:30:54,232 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5853 states. [2018-11-23 00:30:54,310 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1188 [2018-11-23 00:30:54,310 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:30:54,310 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:30:54,326 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:54,326 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:54,326 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-23 00:30:54,326 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5853 states. [2018-11-23 00:30:54,362 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1188 [2018-11-23 00:30:54,362 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:30:54,363 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:30:54,367 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:54,367 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:54,375 INFO L794 eck$LassoCheckResult]: Stem: 3655#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4753#L-1true havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 2184#L2420true havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1939#L2428true main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 3932#L2767true assume 0 != main_~tmp~19; 5488#L2744true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2498#L237true havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1332#L868true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 5406#L893true bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1661#L515true assume 0 == initPersonOnFloor_~floor; 1324#L516true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5752#L623-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2131#L307true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2810#L319-2true havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4293#L1174true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 924#L1226true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1779#L2804true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 1705#L2805true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2112#L1191true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 420#L1212true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 1149#L2809true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 4507#L2910true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 548#L244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5723#L271true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3243#L1787true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3897#L1799true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4844#L1938true assume !(0 != timeShift_~tmp___9~2); 4661#L2029true assume !(1 == ~doorState~0); 4665#L2029-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2558#L1378true assume !(1 == stopRequestedInDirection_~dir); 1954#L1547true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3120#L1700true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5661#L2037true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 992#L1754true assume !(1 == ~currentHeading~0); 4711#L1764true assume !(0 == ~currentFloorID~0); 4713#L1764-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5790#L1770-5true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4349#L2935true assume !(-1 == ~expectedDirection~0); 2292#L2947true assume !(1 == ~expectedDirection~0); 2371#L2948true havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4297#L1174-1true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 894#L1226-3true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1777#L2804-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1895#L2866-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2079#L1191-16true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 365#L1212-16true __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 3104#L2870-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4516#L2910-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 515#L244-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5827#L271-21true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3247#L1787-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3899#L1799-1true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4849#L1938-1true assume !(0 != timeShift_~tmp___9~2); 4669#L2029-3true assume !(1 == ~doorState~0); 4517#L2029-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2564#L1378-2true assume !(1 == stopRequestedInDirection_~dir); 1926#L1547-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3125#L1700-2true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5645#L2037-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 961#L1754-3true assume !(1 == ~currentHeading~0); 4703#L1764-9true assume !(0 == ~currentFloorID~0); 4689#L1764-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5780#L1770-11true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4352#L2935-1true assume !(-1 == ~expectedDirection~0); 2294#L2947-1true assume !(1 == ~expectedDirection~0); 2370#L2948-1true havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4265#L1174-2true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 870#L1226-6true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1783#L2804-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1903#L2866-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2050#L1191-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 330#L1212-27true __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 3108#L2870-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4522#L2910-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 471#L244-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5792#L271-42true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3213#L1787-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3902#L1799-2true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4854#L1938-2true assume !(0 != timeShift_~tmp___9~2); 4514#L2029-6true assume !(1 == ~doorState~0); 4525#L2029-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2685#L1378-4true assume !(1 == stopRequestedInDirection_~dir); 1934#L1547-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3136#L1700-4true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5644#L2037-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 928#L1754-6true assume !(1 == ~currentHeading~0); 4677#L1764-18true assume !(0 == ~currentFloorID~0); 4685#L1764-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5604#L1770-17true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4358#L2935-2true assume !(-1 == ~expectedDirection~0); 2297#L2947-2true assume !(1 == ~expectedDirection~0); 2372#L2948-2true havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1334#L868-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 5408#L893-1true bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1664#L515-1true assume 0 == initPersonOnFloor_~floor; 1326#L516-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5755#L623-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2136#L307-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2821#L319-5true havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4268#L1174-3true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 878#L1226-9true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1791#L2804-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 1680#L2805-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2040#L1191-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 564#L1212-33true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 1135#L2809-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 4519#L2910-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 118#L244-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5605#L271-63true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3221#L1787-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3889#L1799-3true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4852#L1938-3true assume !(0 != timeShift_~tmp___9~2); 4494#L2029-9true assume !(1 == ~doorState~0); 4497#L2029-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2689#L1378-6true assume !(1 == stopRequestedInDirection_~dir); 1943#L1547-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3364#L1700-6true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5647#L2037-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 943#L1754-9true assume !(1 == ~currentHeading~0); 4511#L1764-27true assume !(0 == ~currentFloorID~0); 4515#L1764-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5584#L1770-23true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4331#L2935-3true assume !(-1 == ~expectedDirection~0); 2301#L2947-3true assume !(1 == ~expectedDirection~0); 2373#L2948-3true cleanup_~i~3 := 0; 3663#L2576-2true [2018-11-23 00:30:54,382 INFO L796 eck$LassoCheckResult]: Loop: 3663#L2576-2true assume !false; 3454#L2577true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3194#L2580true assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2589#L1025true cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 4432#L2584true assume 1 != cleanup_~tmp___0~8; 4430#L2584-1true havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 33#L244-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5545#L271-84true anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1974#L1282true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 3497#L1346true isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 3971#L1359true cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 2365#L2596true assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4275#L1174-4true __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 859#L1226-12true __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1796#L2804-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1870#L2866-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1881#L1191-49true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 509#L1212-49true __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 3091#L2870-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 4523#L2910-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 273#L244-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5559#L271-89true stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3220#L1787-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3888#L1799-4true timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 4828#L1938-4true assume !(0 != timeShift_~tmp___9~2); 4501#L2029-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4503#L2029-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2693#L1378-8true assume !(1 == stopRequestedInDirection_~dir); 1910#L1547-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3373#L1700-8true timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 5652#L2037-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 906#L1754-12true assume !(1 == ~currentHeading~0); 4504#L1764-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4487#L1764-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5572#L1770-29true havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4327#L2935-4true assume !(-1 == ~expectedDirection~0); 2299#L2947-4true assume !(1 == ~expectedDirection~0); 2374#L2948-4true cleanup_~i~3 := 1 + cleanup_~i~3; 3663#L2576-2true [2018-11-23 00:30:54,389 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:30:54,389 INFO L82 PathProgramCache]: Analyzing trace with hash -568130459, now seen corresponding path program 1 times [2018-11-23 00:30:54,391 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:30:54,392 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:30:54,434 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:54,434 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:30:54,434 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:54,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:30:54,704 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:30:54,706 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:30:54,706 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:30:54,709 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:30:54,710 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:30:54,710 INFO L82 PathProgramCache]: Analyzing trace with hash 914140713, now seen corresponding path program 1 times [2018-11-23 00:30:54,710 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:30:54,710 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:30:54,711 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:54,711 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:30:54,711 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:54,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:30:54,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:30:54,780 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:30:54,780 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:30:54,781 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:30:54,791 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:30:54,791 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:30:54,793 INFO L87 Difference]: Start difference. First operand 5853 states. Second operand 6 states. [2018-11-23 00:30:58,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:30:58,153 INFO L93 Difference]: Finished difference Result 14697 states and 27598 transitions. [2018-11-23 00:30:58,154 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 00:30:58,155 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14697 states and 27598 transitions. [2018-11-23 00:30:58,253 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3397 [2018-11-23 00:30:58,319 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14697 states to 14627 states and 27517 transitions. [2018-11-23 00:30:58,320 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14627 [2018-11-23 00:30:58,332 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14627 [2018-11-23 00:30:58,333 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14627 states and 27517 transitions. [2018-11-23 00:30:58,361 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:30:58,361 INFO L705 BuchiCegarLoop]: Abstraction has 14627 states and 27517 transitions. [2018-11-23 00:30:58,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14627 states and 27517 transitions. [2018-11-23 00:30:58,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14627 to 9729. [2018-11-23 00:30:58,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9729 states. [2018-11-23 00:30:58,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18316 transitions. [2018-11-23 00:30:58,590 INFO L728 BuchiCegarLoop]: Abstraction has 9729 states and 18316 transitions. [2018-11-23 00:30:58,590 INFO L608 BuchiCegarLoop]: Abstraction has 9729 states and 18316 transitions. [2018-11-23 00:30:58,590 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-23 00:30:58,590 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18316 transitions. [2018-11-23 00:30:58,622 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2181 [2018-11-23 00:30:58,622 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:30:58,622 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:30:58,625 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:58,625 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:58,626 INFO L794 eck$LassoCheckResult]: Stem: 25284#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 25285#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 23832#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 23442#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 23443#L2767 assume 0 != main_~tmp~19; 25575#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 24121#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 22904#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 22843#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23152#L515 assume 0 == initPersonOnFloor_~floor; 22897#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21084#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23742#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23501#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24409#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22175#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22176#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 23169#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23170#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21479#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 21480#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 21843#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 21688#L244 assume !(0 == isFloorCalling_~floorID); 21055#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 21056#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24751#L1787 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24752#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25541#L1938 assume !(0 != timeShift_~tmp___9~2); 26082#L2029 assume !(1 == ~doorState~0); 26083#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24181#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 24182#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 24122#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21046#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24555#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 22329#L1754 assume !(1 == ~currentHeading~0); 22330#L1764 assume !(0 == ~currentFloorID~0); 26159#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26149#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25820#L2935 assume !(-1 == ~expectedDirection~0); 23919#L2947 assume !(1 == ~expectedDirection~0); 23527#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23993#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22107#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22108#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23179#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 23358#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21652#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21654#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 22853#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24973#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25913#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22312#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24756#L1787-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24757#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25543#L1938-1 assume !(0 != timeShift_~tmp___9~2); 26095#L2029-3 assume !(1 == ~doorState~0); 25914#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24189#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 24190#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21318#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24563#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 22259#L1754-3 assume !(1 == ~currentHeading~0); 22260#L1764-9 assume !(0 == ~currentFloorID~0); 26127#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26105#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25821#L2935-1 assume !(-1 == ~expectedDirection~0); 23921#L2947-1 assume !(1 == ~expectedDirection~0); 23528#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23992#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22055#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22056#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23183#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 23373#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21660#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21662#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 22859#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24978#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25921#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22105#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24697#L1787-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24698#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25546#L1938-2 assume !(0 != timeShift_~tmp___9~2); 25911#L2029-6 assume !(1 == ~doorState~0); 25912#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24301#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 24302#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 30109#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 30107#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 30106#L1754-6 assume !(1 == ~currentHeading~0); 30105#L1764-18 assume !(0 == ~currentFloorID~0); 26108#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26081#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25822#L2935-2 assume !(-1 == ~expectedDirection~0); 23924#L2947-2 assume !(1 == ~expectedDirection~0); 23519#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 22905#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 22850#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23154#L515-1 assume 0 == initPersonOnFloor_~floor; 22899#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21099#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 23749#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23505#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24420#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22073#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22074#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 23163#L2805-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23165#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23601#L1191-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21714#L1212-34 __utac_acc__Specification3_spec__1_#t~ret115 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret115;havoc __utac_acc__Specification3_spec__1_#t~ret115; 21715#L2820-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 24953#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25917#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22623#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24712#L1787-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24713#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25533#L1938-3 assume !(0 != timeShift_~tmp___9~2); 25882#L2029-9 assume !(1 == ~doorState~0); 25883#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24308#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 24309#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 24910#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24911#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 26594#L1754-9 assume !(1 == ~currentHeading~0); 30196#L1764-27 assume !(0 == ~currentFloorID~0); 25906#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25885#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25814#L2935-3 assume !(-1 == ~expectedDirection~0); 23928#L2947-3 assume !(1 == ~expectedDirection~0); 23520#L2948-3 cleanup_~i~3 := 0; 23994#L2576-2 [2018-11-23 00:30:58,626 INFO L796 eck$LassoCheckResult]: Loop: 23994#L2576-2 assume !false; 25040#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 24663#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 24218#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 24219#L2584 assume 1 != cleanup_~tmp___0~8; 25839#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 20660#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 20661#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 23507#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 21235#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 25108#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 23984#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 23985#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22032#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 22033#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 23189#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 23310#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21603#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 21605#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 22822#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 24957#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25922#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 22364#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 24710#L1787-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~4;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24711#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 25532#L1938-4 assume !(0 != timeShift_~tmp___9~2); 25892#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25893#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 24315#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 24316#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 21270#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 24922#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 30156#L1754-12 assume !(1 == ~currentHeading~0); 30192#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 25873#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25869#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 25813#L2935-4 assume !(-1 == ~expectedDirection~0); 23926#L2947-4 assume !(1 == ~expectedDirection~0); 23522#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 23994#L2576-2 [2018-11-23 00:30:58,629 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:30:58,629 INFO L82 PathProgramCache]: Analyzing trace with hash -2119866386, now seen corresponding path program 1 times [2018-11-23 00:30:58,629 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:30:58,629 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:30:58,630 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:58,630 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:30:58,630 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:58,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:30:58,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:30:58,714 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:30:58,714 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:30:58,714 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:30:58,715 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:30:58,715 INFO L82 PathProgramCache]: Analyzing trace with hash 844132719, now seen corresponding path program 1 times [2018-11-23 00:30:58,715 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:30:58,715 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:30:58,715 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:58,716 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:30:58,716 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:58,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:30:58,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:30:58,775 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:30:58,775 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:30:58,775 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:30:58,777 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:30:58,777 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:30:58,778 INFO L87 Difference]: Start difference. First operand 9729 states and 18316 transitions. cyclomatic complexity: 8588 Second operand 6 states. [2018-11-23 00:30:59,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:30:59,216 INFO L93 Difference]: Finished difference Result 17431 states and 32910 transitions. [2018-11-23 00:30:59,217 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 00:30:59,217 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17431 states and 32910 transitions. [2018-11-23 00:30:59,289 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3994 [2018-11-23 00:30:59,352 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17431 states to 17431 states and 32910 transitions. [2018-11-23 00:30:59,353 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17431 [2018-11-23 00:30:59,366 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17431 [2018-11-23 00:30:59,366 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17431 states and 32910 transitions. [2018-11-23 00:30:59,383 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:30:59,383 INFO L705 BuchiCegarLoop]: Abstraction has 17431 states and 32910 transitions. [2018-11-23 00:30:59,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17431 states and 32910 transitions. [2018-11-23 00:30:59,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17431 to 9747. [2018-11-23 00:30:59,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9747 states. [2018-11-23 00:30:59,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18334 transitions. [2018-11-23 00:30:59,561 INFO L728 BuchiCegarLoop]: Abstraction has 9747 states and 18334 transitions. [2018-11-23 00:30:59,561 INFO L608 BuchiCegarLoop]: Abstraction has 9747 states and 18334 transitions. [2018-11-23 00:30:59,562 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-23 00:30:59,562 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18334 transitions. [2018-11-23 00:30:59,602 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2185 [2018-11-23 00:30:59,602 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:30:59,602 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:30:59,605 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:59,605 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:30:59,606 INFO L794 eck$LassoCheckResult]: Stem: 52395#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 52396#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 50975#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 50585#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 50586#L2767 assume 0 != main_~tmp~19; 52689#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 51261#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 50070#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 50009#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 50302#L515 assume 0 == initPersonOnFloor_~floor; 50063#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 48274#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50885#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 50642#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51542#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49352#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49353#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 50317#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50318#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48668#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 48669#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 49025#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 48872#L244 assume !(0 == isFloorCalling_~floorID); 48248#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 48249#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 51878#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50823#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48611#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 48612#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 52889#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 53956#L1938 assume !(0 != timeShift_~tmp___9~2); 53184#L2029 assume !(1 == ~doorState~0); 53185#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 51322#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 51323#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 51262#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 48237#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 51683#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 49506#L1754 assume !(1 == ~currentHeading~0); 49507#L1764 assume !(0 == ~currentFloorID~0); 53258#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53247#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 54183#L2935 assume !(-1 == ~expectedDirection~0); 54179#L2947 assume !(1 == ~expectedDirection~0); 54178#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 54177#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 54176#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 54174#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 54175#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 54193#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 54187#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 54185#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 54142#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 54138#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 54133#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 54129#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 54126#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 54123#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 54118#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 54116#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54115#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 54110#L1938-1 assume !(0 != timeShift_~tmp___9~2); 54108#L2029-3 assume !(1 == ~doorState~0); 54088#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54085#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 54082#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 54062#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 54059#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 54057#L1754-3 assume !(1 == ~currentHeading~0); 54055#L1764-9 assume !(0 == ~currentFloorID~0); 53227#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53205#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52935#L2935-1 assume !(-1 == ~expectedDirection~0); 51064#L2947-1 assume !(1 == ~expectedDirection~0); 50669#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51135#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49231#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49232#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 50325#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 50513#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 48844#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 48846#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 50025#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 52101#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 54273#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 54269#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 54268#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 54266#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 54262#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 54054#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54053#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 54052#L1938-2 assume !(0 != timeShift_~tmp___9~2); 54051#L2029-6 assume !(1 == ~doorState~0); 54050#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 54049#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 53968#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 53966#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53963#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53961#L1754-6 assume !(1 == ~currentHeading~0); 53959#L1764-18 assume !(0 == ~currentFloorID~0); 53208#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53182#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52936#L2935-2 assume !(-1 == ~expectedDirection~0); 51067#L2947-2 assume !(1 == ~expectedDirection~0); 50660#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 50071#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 50015#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 50304#L515-1 assume 0 == initPersonOnFloor_~floor; 50065#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 48289#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50892#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 50646#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51550#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49249#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49250#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 50311#L2805-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 50313#L2815-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50742#L1191-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48897#L1212-34 __utac_acc__Specification3_spec__1_#t~ret115 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret115;havoc __utac_acc__Specification3_spec__1_#t~ret115; 48898#L2820-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 52078#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53838#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53832#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 53831#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 53829#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 53823#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 53818#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 53816#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 53814#L1938-3 assume !(0 != timeShift_~tmp___9~2); 53813#L2029-9 assume !(1 == ~doorState~0); 53812#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53810#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 53781#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 53772#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53770#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53771#L1754-9 assume !(1 == ~currentHeading~0); 53801#L1764-27 assume !(0 == ~currentFloorID~0); 53019#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 52998#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52928#L2935-3 assume !(-1 == ~expectedDirection~0); 51071#L2947-3 assume !(1 == ~expectedDirection~0); 50661#L2948-3 cleanup_~i~3 := 0; 51137#L2576-2 [2018-11-23 00:30:59,607 INFO L796 eck$LassoCheckResult]: Loop: 51137#L2576-2 assume !false; 52160#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 51791#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 51356#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 51357#L2584 assume 1 != cleanup_~tmp___0~8; 52954#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 47853#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 47854#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 50648#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 48424#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 52223#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 51127#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51128#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 49208#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 49209#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 50314#L2805-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 50316#L2815-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 50516#L1191-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 48847#L1212-45 __utac_acc__Specification3_spec__1_#t~ret115 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret115;havoc __utac_acc__Specification3_spec__1_#t~ret115; 48848#L2820-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 52083#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 53948#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53943#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 53942#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 53941#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 53932#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 53929#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 53928#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 53927#L1938-4 assume !(0 != timeShift_~tmp___9~2); 53926#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 53925#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53924#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 53880#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 53875#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 53873#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 53874#L1754-12 assume !(1 == ~currentHeading~0); 53713#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 52988#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52983#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52927#L2935-4 assume !(-1 == ~expectedDirection~0); 51069#L2947-4 assume !(1 == ~expectedDirection~0); 50663#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 51137#L2576-2 [2018-11-23 00:30:59,616 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:30:59,616 INFO L82 PathProgramCache]: Analyzing trace with hash 1819172379, now seen corresponding path program 1 times [2018-11-23 00:30:59,616 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:30:59,616 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:30:59,617 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:59,617 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:30:59,617 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:59,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:30:59,708 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:30:59,708 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:30:59,708 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:30:59,709 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:30:59,709 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:30:59,709 INFO L82 PathProgramCache]: Analyzing trace with hash 410295228, now seen corresponding path program 1 times [2018-11-23 00:30:59,709 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:30:59,709 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:30:59,710 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:59,710 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:30:59,710 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:30:59,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:30:59,741 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:30:59,741 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:30:59,741 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:30:59,741 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:30:59,741 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:30:59,742 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:30:59,742 INFO L87 Difference]: Start difference. First operand 9747 states and 18334 transitions. cyclomatic complexity: 8588 Second operand 5 states. [2018-11-23 00:31:00,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:00,617 INFO L93 Difference]: Finished difference Result 18950 states and 35576 transitions. [2018-11-23 00:31:00,618 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 00:31:00,618 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18950 states and 35576 transitions. [2018-11-23 00:31:00,673 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4263 [2018-11-23 00:31:00,715 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18950 states to 18950 states and 35576 transitions. [2018-11-23 00:31:00,716 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18950 [2018-11-23 00:31:00,726 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18950 [2018-11-23 00:31:00,726 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18950 states and 35576 transitions. [2018-11-23 00:31:00,737 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:00,737 INFO L705 BuchiCegarLoop]: Abstraction has 18950 states and 35576 transitions. [2018-11-23 00:31:00,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18950 states and 35576 transitions. [2018-11-23 00:31:00,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18950 to 9747. [2018-11-23 00:31:00,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9747 states. [2018-11-23 00:31:00,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18278 transitions. [2018-11-23 00:31:00,856 INFO L728 BuchiCegarLoop]: Abstraction has 9747 states and 18278 transitions. [2018-11-23 00:31:00,856 INFO L608 BuchiCegarLoop]: Abstraction has 9747 states and 18278 transitions. [2018-11-23 00:31:00,857 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-23 00:31:00,857 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18278 transitions. [2018-11-23 00:31:00,877 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2185 [2018-11-23 00:31:00,877 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:00,877 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:00,879 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:00,879 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:00,880 INFO L794 eck$LassoCheckResult]: Stem: 81180#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 81181#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 79717#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 79320#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 79321#L2767 assume 0 != main_~tmp~19; 81472#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 80008#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 78803#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 78740#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 79041#L515 assume 0 == initPersonOnFloor_~floor; 78796#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 76990#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 79625#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 79380#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 80295#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 78082#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 78083#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 79056#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79057#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77383#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 77384#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 77742#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 77590#L244 assume !(0 == isFloorCalling_~floorID); 76964#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 76965#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 80648#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79561#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77328#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77329#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 81677#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 82537#L1938 assume !(0 != timeShift_~tmp___9~2); 81989#L2029 assume !(1 == ~doorState~0); 81990#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 80068#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 80069#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 80009#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 76953#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 80453#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 78235#L1754 assume !(1 == ~currentHeading~0); 78236#L1764 assume !(0 == ~currentFloorID~0); 82062#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82052#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 81725#L2935 assume !(-1 == ~expectedDirection~0); 79806#L2947 assume !(1 == ~expectedDirection~0); 79406#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 79881#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 78013#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 78014#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 79234#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 79236#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 83838#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 78749#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 78751#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 80878#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 77532#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 77533#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 80653#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 80655#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 82746#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 82745#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82744#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 82742#L1938-1 assume !(0 != timeShift_~tmp___9~2); 82741#L2029-3 assume !(1 == ~doorState~0); 82740#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 82734#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 82732#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 82713#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82711#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82712#L1754-3 assume !(1 == ~currentHeading~0); 82785#L1764-9 assume !(0 == ~currentFloorID~0); 82032#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82010#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 84984#L2935-1 assume !(-1 == ~expectedDirection~0); 84981#L2947-1 assume !(1 == ~expectedDirection~0); 84980#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 84957#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 84950#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 84947#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 84948#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 86191#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 86190#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 78756#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 78758#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 80883#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 81828#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82827#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 82693#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 82691#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 82687#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 82685#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 82684#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 82682#L1938-2 assume !(0 != timeShift_~tmp___9~2); 82681#L2029-6 assume !(1 == ~doorState~0); 82680#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 82679#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 82621#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 82620#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 82614#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82615#L1754-6 assume !(1 == ~currentHeading~0); 82828#L1764-18 assume !(0 == ~currentFloorID~0); 82013#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81988#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83059#L2935-2 assume !(-1 == ~expectedDirection~0); 83056#L2947-2 assume !(1 == ~expectedDirection~0); 83055#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 83053#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 83048#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 83047#L515-1 assume 0 == initPersonOnFloor_~floor; 83029#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 83012#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 83007#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 83004#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 83002#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 82995#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 82979#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 82974#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 82973#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 82972#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 82971#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 82954#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 82951#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 82950#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 82945#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 82944#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79231#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77550#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77551#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 81684#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 86192#L1938-3 assume !(0 != timeShift_~tmp___9~2); 81791#L2029-9 assume !(1 == ~doorState~0); 81792#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 80194#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 80195#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 77152#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 80814#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82488#L1754-9 assume !(1 == ~currentHeading~0); 82535#L1764-27 assume !(0 == ~currentFloorID~0); 81816#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81794#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83978#L2935-3 assume !(-1 == ~expectedDirection~0); 83973#L2947-3 assume !(1 == ~expectedDirection~0); 79882#L2948-3 cleanup_~i~3 := 0; 79883#L2576-2 [2018-11-23 00:31:00,880 INFO L796 eck$LassoCheckResult]: Loop: 79883#L2576-2 assume !false; 80942#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 80560#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 80103#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 80104#L2584 assume 1 != cleanup_~tmp___0~8; 81748#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 76568#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 76569#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 79386#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 77139#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 83928#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 79872#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 79873#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 83927#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 83926#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83925#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 80172#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 80173#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 83923#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 83907#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 83905#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 83904#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 83836#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 83835#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 79167#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 77496#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77497#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 81669#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 86189#L1938-4 assume !(0 != timeShift_~tmp___9~2); 81801#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 81802#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 80202#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 80203#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 77176#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 80826#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 82492#L1754-12 assume !(1 == ~currentHeading~0); 82529#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 81784#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 81779#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83976#L2935-4 assume !(-1 == ~expectedDirection~0); 83970#L2947-4 assume !(1 == ~expectedDirection~0); 79884#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 79883#L2576-2 [2018-11-23 00:31:00,880 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:00,881 INFO L82 PathProgramCache]: Analyzing trace with hash -239744925, now seen corresponding path program 1 times [2018-11-23 00:31:00,881 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:00,881 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:00,883 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:00,883 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:00,884 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:00,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:00,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:00,950 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:00,950 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:00,951 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:00,951 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:00,951 INFO L82 PathProgramCache]: Analyzing trace with hash -1648622076, now seen corresponding path program 1 times [2018-11-23 00:31:00,951 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:00,951 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:00,952 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:00,952 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:00,952 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:00,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:00,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:00,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:00,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 00:31:00,995 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:00,996 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 00:31:00,996 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:31:00,996 INFO L87 Difference]: Start difference. First operand 9747 states and 18278 transitions. cyclomatic complexity: 8532 Second operand 7 states. [2018-11-23 00:31:03,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:03,158 INFO L93 Difference]: Finished difference Result 60210 states and 113358 transitions. [2018-11-23 00:31:03,158 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-11-23 00:31:03,158 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60210 states and 113358 transitions. [2018-11-23 00:31:03,304 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21754 [2018-11-23 00:31:03,432 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60210 states to 60210 states and 113358 transitions. [2018-11-23 00:31:03,432 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60210 [2018-11-23 00:31:03,464 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60210 [2018-11-23 00:31:03,464 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60210 states and 113358 transitions. [2018-11-23 00:31:03,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:03,493 INFO L705 BuchiCegarLoop]: Abstraction has 60210 states and 113358 transitions. [2018-11-23 00:31:03,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60210 states and 113358 transitions. [2018-11-23 00:31:03,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60210 to 19455. [2018-11-23 00:31:03,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 19455 states. [2018-11-23 00:31:03,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19455 states to 19455 states and 36473 transitions. [2018-11-23 00:31:03,773 INFO L728 BuchiCegarLoop]: Abstraction has 19455 states and 36473 transitions. [2018-11-23 00:31:03,773 INFO L608 BuchiCegarLoop]: Abstraction has 19455 states and 36473 transitions. [2018-11-23 00:31:03,773 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-23 00:31:03,773 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19455 states and 36473 transitions. [2018-11-23 00:31:03,807 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4380 [2018-11-23 00:31:03,807 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:03,808 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:03,810 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:03,810 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:03,810 INFO L794 eck$LassoCheckResult]: Stem: 151419#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 151420#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 149859#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 149450#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 149451#L2767 assume 0 != main_~tmp~19; 151713#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 150174#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 148847#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 148786#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 149136#L515 assume 0 == initPersonOnFloor_~floor; 148840#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 147006#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 149759#L307 assume !(0 == callOnFloor_~floorID); 149525#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 149512#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 154751#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 154750#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 154748#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 154747#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149731#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147822#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 148606#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 147786#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 147624#L244 assume !(0 == isFloorCalling_~floorID); 147625#L248 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 152992#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 152993#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149695#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147781#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 151935#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 151936#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 153075#L1938 assume !(0 != timeShift_~tmp___9~2); 153076#L2029 assume !(1 == ~doorState~0); 155897#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 150237#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 150239#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 150175#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146969#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 150655#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148276#L1754 assume !(1 == ~currentHeading~0); 148277#L1764 assume !(0 == ~currentFloorID~0); 152367#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152357#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 154626#L2935 assume !(-1 == ~expectedDirection~0); 154616#L2947 assume !(1 == ~expectedDirection~0); 154615#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 154614#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 154613#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 154612#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 154611#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 154608#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 154606#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 154604#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 154582#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 154579#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 147564#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 147565#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 153982#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149651#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147299#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 147300#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 151940#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 154561#L1938-1 assume !(0 != timeShift_~tmp___9~2); 154560#L2029-3 assume !(1 == ~doorState~0); 154559#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 154558#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 154523#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 154510#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 154508#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 154509#L1754-3 assume !(1 == ~currentHeading~0); 155829#L1764-9 assume !(0 == ~currentFloorID~0); 152335#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152310#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 156001#L2935-1 assume !(-1 == ~expectedDirection~0); 155998#L2947-1 assume !(1 == ~expectedDirection~0); 155997#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 155996#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 155995#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 155993#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 155990#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 155987#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 155972#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 155964#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 155957#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 153355#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 153353#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 153349#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 153348#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 153346#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 153342#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 153340#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 153339#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 153337#L1938-2 assume !(0 != timeShift_~tmp___9~2); 153336#L2029-6 assume !(1 == ~doorState~0); 153334#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 153329#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 153276#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 153275#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 153274#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148135#L1754-6 assume !(1 == ~currentHeading~0); 148137#L1764-18 assume !(0 == ~currentFloorID~0); 152327#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152289#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 158152#L2935-2 assume !(-1 == ~expectedDirection~0); 158149#L2947-2 assume !(1 == ~expectedDirection~0); 158148#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 158146#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 158141#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 158140#L515-1 assume 0 == initPersonOnFloor_~floor; 158122#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 156918#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 156677#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 156486#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 156485#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 156484#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 156482#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 156483#L2805-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 149151#L1191-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 147647#L1212-33 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 147648#L2809-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 147944#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 154628#L244-63 assume !(0 == isFloorCalling_~floorID); 154629#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 154115#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 154116#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 154101#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 154097#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 154089#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 154091#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 154079#L1938-3 assume !(0 != timeShift_~tmp___9~2); 154081#L2029-9 assume !(1 == ~doorState~0); 164101#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 164099#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 164098#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 150159#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 146927#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 151037#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148168#L1754-9 assume !(1 == ~currentHeading~0); 148169#L1764-27 assume !(0 == ~currentFloorID~0); 152105#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163885#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 163883#L2935-3 assume !(-1 == ~expectedDirection~0); 163880#L2947-3 assume !(1 == ~expectedDirection~0); 163878#L2948-3 cleanup_~i~3 := 0; 159801#L2576-2 [2018-11-23 00:31:03,811 INFO L796 eck$LassoCheckResult]: Loop: 159801#L2576-2 assume !false; 159800#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 159799#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 159798#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 159797#L2584 assume 1 != cleanup_~tmp___0~8; 159784#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 159782#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 159783#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 159746#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 159741#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 159740#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 159739#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 159738#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 159737#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 159735#L2804-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 159733#L2805-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 159734#L1191-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 162910#L1212-44 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 162893#L2809-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 156801#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 156799#L244-89 assume !(0 == isFloorCalling_~floorID); 156800#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 162863#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 156791#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 156792#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 162852#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 156781#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 156783#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 156777#L1938-4 assume !(0 != timeShift_~tmp___9~2); 156776#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 156612#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 156609#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 156611#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 147849#L1382-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 147191#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 151051#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 148082#L1754-12 assume !(1 == ~currentHeading~0); 148084#L1764-36 assume !(0 == ~currentFloorID~0); 164919#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 164915#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 164913#L2935-4 assume !(-1 == ~expectedDirection~0); 164910#L2947-4 assume !(1 == ~expectedDirection~0); 163877#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 159801#L2576-2 [2018-11-23 00:31:03,813 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:03,813 INFO L82 PathProgramCache]: Analyzing trace with hash 1940711574, now seen corresponding path program 1 times [2018-11-23 00:31:03,813 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:03,813 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:03,814 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:03,814 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:03,814 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:03,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:03,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:03,886 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:03,886 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:03,888 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:03,888 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:03,888 INFO L82 PathProgramCache]: Analyzing trace with hash 65845131, now seen corresponding path program 1 times [2018-11-23 00:31:03,888 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:03,888 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:03,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:03,889 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:03,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:03,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:03,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:03,926 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:03,926 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 00:31:03,926 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:03,926 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 00:31:03,927 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 00:31:03,927 INFO L87 Difference]: Start difference. First operand 19455 states and 36473 transitions. cyclomatic complexity: 17019 Second operand 6 states. [2018-11-23 00:31:06,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:06,528 INFO L93 Difference]: Finished difference Result 38163 states and 71151 transitions. [2018-11-23 00:31:06,528 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 00:31:06,528 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38163 states and 71151 transitions. [2018-11-23 00:31:06,617 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9138 [2018-11-23 00:31:06,686 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38163 states to 38163 states and 71151 transitions. [2018-11-23 00:31:06,687 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38163 [2018-11-23 00:31:06,706 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38163 [2018-11-23 00:31:06,706 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38163 states and 71151 transitions. [2018-11-23 00:31:06,723 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:06,723 INFO L705 BuchiCegarLoop]: Abstraction has 38163 states and 71151 transitions. [2018-11-23 00:31:06,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38163 states and 71151 transitions. [2018-11-23 00:31:06,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38163 to 26535. [2018-11-23 00:31:06,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26535 states. [2018-11-23 00:31:06,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26535 states to 26535 states and 49557 transitions. [2018-11-23 00:31:06,964 INFO L728 BuchiCegarLoop]: Abstraction has 26535 states and 49557 transitions. [2018-11-23 00:31:06,964 INFO L608 BuchiCegarLoop]: Abstraction has 26535 states and 49557 transitions. [2018-11-23 00:31:06,964 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-23 00:31:06,964 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26535 states and 49557 transitions. [2018-11-23 00:31:07,016 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6260 [2018-11-23 00:31:07,016 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:07,017 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:07,019 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:07,019 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:07,019 INFO L794 eck$LassoCheckResult]: Stem: 209168#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 209169#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 207582#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 207176#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 207177#L2767 assume 0 != main_~tmp~19; 209468#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 207903#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 206517#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 206451#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 206836#L515 assume 0 == initPersonOnFloor_~floor; 206507#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 204646#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 207486#L307 assume !(0 == callOnFloor_~floorID); 207250#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 207236#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 213863#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 213862#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 213860#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 213858#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 213859#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205048#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 205049#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 213834#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 213833#L244 assume !(0 == isFloorCalling_~floorID); 213832#L248 assume !(1 == isFloorCalling_~floorID); 213829#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 213828#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 213827#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 213822#L1191-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 213818#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 213816#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 213815#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 213813#L1938 assume !(0 != timeShift_~tmp___9~2); 213812#L2029 assume !(1 == ~doorState~0); 213811#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 207971#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 207973#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 207904#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 204610#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 208411#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 205933#L1754 assume !(1 == ~currentHeading~0); 205934#L1764 assume !(0 == ~currentFloorID~0); 210083#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210071#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 209724#L2935 assume !(-1 == ~expectedDirection~0); 207690#L2947 assume !(1 == ~expectedDirection~0); 207263#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 207766#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 205711#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 205712#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 206901#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 214749#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 214735#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 214727#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 214720#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 214717#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 214711#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 214706#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 214702#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 214704#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 214707#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 214705#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 214700#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 214701#L1938-1 assume !(0 != timeShift_~tmp___9~2); 216272#L2029-3 assume !(1 == ~doorState~0); 219878#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 219876#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 219874#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 219875#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 219935#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 219936#L1754-3 assume !(1 == ~currentHeading~0); 230676#L1764-9 assume !(0 == ~currentFloorID~0); 210048#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210024#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 212871#L2935-1 assume !(-1 == ~expectedDirection~0); 212867#L2947-1 assume !(1 == ~expectedDirection~0); 212863#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 212859#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 212857#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 212854#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 212846#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 212842#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 212828#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 212820#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 212812#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 212809#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 212803#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 212798#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 212794#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 212796#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 212799#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 212797#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 212792#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 212793#L1938-2 assume !(0 != timeShift_~tmp___9~2); 214892#L2029-6 assume !(1 == ~doorState~0); 214882#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 214877#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 214858#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 214857#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 214855#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 214856#L1754-6 assume !(1 == ~currentHeading~0); 218811#L1764-18 assume !(0 == ~currentFloorID~0); 210040#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210002#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 211213#L2935-2 assume !(-1 == ~expectedDirection~0); 211209#L2947-2 assume !(1 == ~expectedDirection~0); 211205#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 211200#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 211194#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 211187#L515-1 assume 0 == initPersonOnFloor_~floor; 211164#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 211116#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 211114#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 211104#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 211102#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 211100#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 211098#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 211072#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 211073#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 227116#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 227115#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 218884#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 204438#L244-63 assume !(0 == isFloorCalling_~floorID); 204439#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 206227#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 218817#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 207084#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205220#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 205221#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 209422#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 209423#L1938-3 assume !(0 != timeShift_~tmp___9~2); 209792#L2029-9 assume !(1 == ~doorState~0); 209793#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 208130#L1378-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 208131#L818-15 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 222029#L1382-6 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 221874#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 210693#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 205824#L1754-9 assume !(1 == ~currentHeading~0); 205825#L1764-27 assume !(0 == ~currentFloorID~0); 209818#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 220304#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 220301#L2935-3 assume !(-1 == ~expectedDirection~0); 220295#L2947-3 assume !(1 == ~expectedDirection~0); 220290#L2948-3 cleanup_~i~3 := 0; 220288#L2576-2 [2018-11-23 00:31:07,020 INFO L796 eck$LassoCheckResult]: Loop: 220288#L2576-2 assume !false; 220287#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 220286#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 220285#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 220283#L2584 assume 1 != cleanup_~tmp___0~8; 220284#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 228417#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 228418#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 220242#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 220237#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 220235#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 220233#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 220231#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 220229#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 220226#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 220222#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 207036#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205193#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 205194#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 208396#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 204794#L244-89 assume !(0 == isFloorCalling_~floorID); 204795#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 205965#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 208572#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 207020#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 205167#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 205168#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 209668#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 220037#L1938-4 assume !(0 != timeShift_~tmp___9~2); 220038#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 222239#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 222237#L1378-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 220119#L818-20 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 220055#L1382-8 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 206756#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 220043#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 220044#L1754-12 assume !(1 == ~currentHeading~0); 230613#L1764-36 assume !(0 == ~currentFloorID~0); 220309#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 220303#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 220298#L2935-4 assume !(-1 == ~expectedDirection~0); 220292#L2947-4 assume !(1 == ~expectedDirection~0); 220289#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 220288#L2576-2 [2018-11-23 00:31:07,024 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:07,024 INFO L82 PathProgramCache]: Analyzing trace with hash 1362113460, now seen corresponding path program 1 times [2018-11-23 00:31:07,024 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:07,024 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:07,025 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:07,025 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:07,025 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:07,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:07,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:07,093 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:07,093 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:07,093 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:07,094 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:07,094 INFO L82 PathProgramCache]: Analyzing trace with hash 1611421712, now seen corresponding path program 1 times [2018-11-23 00:31:07,094 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:07,094 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:07,095 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:07,095 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:07,095 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:07,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:07,119 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:07,119 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:07,119 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:31:07,120 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:07,120 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:31:07,120 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:31:07,120 INFO L87 Difference]: Start difference. First operand 26535 states and 49557 transitions. cyclomatic complexity: 23023 Second operand 5 states. [2018-11-23 00:31:10,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:10,627 INFO L93 Difference]: Finished difference Result 63127 states and 118305 transitions. [2018-11-23 00:31:10,627 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 00:31:10,627 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63127 states and 118305 transitions. [2018-11-23 00:31:10,798 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16192 [2018-11-23 00:31:10,923 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63127 states to 63127 states and 118305 transitions. [2018-11-23 00:31:10,924 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63127 [2018-11-23 00:31:10,965 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63127 [2018-11-23 00:31:10,965 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63127 states and 118305 transitions. [2018-11-23 00:31:10,999 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:10,999 INFO L705 BuchiCegarLoop]: Abstraction has 63127 states and 118305 transitions. [2018-11-23 00:31:11,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63127 states and 118305 transitions. [2018-11-23 00:31:11,462 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63127 to 25963. [2018-11-23 00:31:11,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25963 states. [2018-11-23 00:31:11,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25963 states to 25963 states and 48531 transitions. [2018-11-23 00:31:11,489 INFO L728 BuchiCegarLoop]: Abstraction has 25963 states and 48531 transitions. [2018-11-23 00:31:11,489 INFO L608 BuchiCegarLoop]: Abstraction has 25963 states and 48531 transitions. [2018-11-23 00:31:11,489 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-23 00:31:11,490 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25963 states and 48531 transitions. [2018-11-23 00:31:11,538 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6117 [2018-11-23 00:31:11,539 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:11,539 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:11,541 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:11,541 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:11,541 INFO L794 eck$LassoCheckResult]: Stem: 298636#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 298637#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 297139#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 296723#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 296724#L2767 assume 0 != main_~tmp~19; 298929#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 297435#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 296171#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 296105#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 296429#L515 assume 0 == initPersonOnFloor_~floor; 296164#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 294328#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 297043#L307 assume !(0 == callOnFloor_~floorID); 296804#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 296792#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 297736#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 295435#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 295436#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 303513#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 297016#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 294720#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 294721#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 295087#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 294934#L244 assume !(0 == isFloorCalling_~floorID); 294303#L248 assume !(1 == isFloorCalling_~floorID); 294304#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 296074#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 298109#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 298111#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 297854#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 294665#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 294666#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 299138#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 300109#L1938 assume !(0 != timeShift_~tmp___9~2); 299460#L2029 assume !(1 == ~doorState~0); 299461#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297498#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 297499#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 297436#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 294292#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 297908#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 300041#L1754 assume !(1 == ~currentHeading~0); 299545#L1764 assume !(0 == ~currentFloorID~0); 299546#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303307#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 303305#L2935 assume !(-1 == ~expectedDirection~0); 303301#L2947 assume !(1 == ~expectedDirection~0); 303300#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 303299#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 303298#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 303296#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 303291#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 303288#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 303270#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 303261#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 303254#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 303251#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 303249#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 303248#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 303246#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 303247#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 303309#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 303245#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 303244#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 303240#L1938-1 assume !(0 != timeShift_~tmp___9~2); 303241#L2029-3 assume !(1 == ~doorState~0); 318677#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297506#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 297507#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318641#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 318639#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318640#L1754-3 assume !(1 == ~currentHeading~0); 318917#L1764-9 assume !(0 == ~currentFloorID~0); 299531#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 301838#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 301828#L2935-1 assume !(-1 == ~expectedDirection~0); 301829#L2947-1 assume !(1 == ~expectedDirection~0); 301822#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 301823#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 301818#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 301819#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 305910#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 301817#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 301813#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 301810#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 301776#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 301772#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 301771#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 301612#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 301609#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 301610#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 301611#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 301608#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 301606#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 301605#L1938-2 assume !(0 != timeShift_~tmp___9~2); 299291#L2029-6 assume !(1 == ~doorState~0); 299292#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297628#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 297629#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318867#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 318865#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318866#L1754-6 assume !(1 == ~currentHeading~0); 319789#L1764-18 assume !(0 == ~currentFloorID~0); 299488#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 300255#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 314024#L2935-2 assume !(-1 == ~expectedDirection~0); 300243#L2947-2 assume !(1 == ~expectedDirection~0); 300244#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 300234#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 300229#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 300227#L515-1 assume 0 == initPersonOnFloor_~floor; 300228#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 300190#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 300191#L307-2 assume !(0 == callOnFloor_~floorID); 313229#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 300181#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 300182#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 300177#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 300178#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 316697#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 300176#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 300172#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 300169#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 300139#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 300133#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 300131#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 300130#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 300128#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 300125#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 300127#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 309855#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 309850#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 300111#L1938-3 assume !(0 != timeShift_~tmp___9~2); 299259#L2029-9 assume !(1 == ~doorState~0); 299260#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297634#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 297635#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 309806#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 309804#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 309805#L1754-9 assume !(1 == ~currentHeading~0); 318922#L1764-27 assume !(0 == ~currentFloorID~0); 299286#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 299258#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 311613#L2935-3 assume !(-1 == ~expectedDirection~0); 311607#L2947-3 assume !(1 == ~expectedDirection~0); 311602#L2948-3 cleanup_~i~3 := 0; 311600#L2576-2 [2018-11-23 00:31:11,542 INFO L796 eck$LassoCheckResult]: Loop: 311600#L2576-2 assume !false; 311599#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 311598#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 311597#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 311596#L2584 assume 1 != cleanup_~tmp___0~8; 311595#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 311593#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 311591#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 311592#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 316775#L1286 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 316755#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 316753#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 316751#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 316749#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 316747#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 316744#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 316745#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 316150#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 316143#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 316140#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 316109#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 316106#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 316105#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 316104#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 316103#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 316102#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 316096#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 316094#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 316093#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 316086#L1938-4 assume !(0 != timeShift_~tmp___9~2); 299269#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 299270#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 297641#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 297642#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 318759#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 318756#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 318757#L1754-12 assume !(1 == ~currentHeading~0); 318921#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 299250#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 299245#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 311610#L2935-4 assume !(-1 == ~expectedDirection~0); 311604#L2947-4 assume !(1 == ~expectedDirection~0); 311601#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 311600#L2576-2 [2018-11-23 00:31:11,543 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:11,543 INFO L82 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 1 times [2018-11-23 00:31:11,543 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:11,545 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:11,546 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:11,546 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:11,546 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:11,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:11,621 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:11,621 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:11,622 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:11,622 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:11,622 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:11,622 INFO L82 PathProgramCache]: Analyzing trace with hash -2146990963, now seen corresponding path program 1 times [2018-11-23 00:31:11,622 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:11,622 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:11,623 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:11,623 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:11,623 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:11,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:11,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:11,646 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:11,646 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:31:11,646 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:11,646 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:31:11,646 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:31:11,646 INFO L87 Difference]: Start difference. First operand 25963 states and 48531 transitions. cyclomatic complexity: 22569 Second operand 5 states. [2018-11-23 00:31:13,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:13,239 INFO L93 Difference]: Finished difference Result 126963 states and 239536 transitions. [2018-11-23 00:31:13,239 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 00:31:13,239 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 126963 states and 239536 transitions. [2018-11-23 00:31:13,583 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32106 [2018-11-23 00:31:13,855 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 126963 states to 126963 states and 239536 transitions. [2018-11-23 00:31:13,855 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 126963 [2018-11-23 00:31:13,934 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 126963 [2018-11-23 00:31:13,934 INFO L73 IsDeterministic]: Start isDeterministic. Operand 126963 states and 239536 transitions. [2018-11-23 00:31:13,992 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:13,992 INFO L705 BuchiCegarLoop]: Abstraction has 126963 states and 239536 transitions. [2018-11-23 00:31:14,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126963 states and 239536 transitions. [2018-11-23 00:31:14,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126963 to 50691. [2018-11-23 00:31:14,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50691 states. [2018-11-23 00:31:14,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50691 states to 50691 states and 94803 transitions. [2018-11-23 00:31:14,965 INFO L728 BuchiCegarLoop]: Abstraction has 50691 states and 94803 transitions. [2018-11-23 00:31:14,965 INFO L608 BuchiCegarLoop]: Abstraction has 50691 states and 94803 transitions. [2018-11-23 00:31:14,965 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-23 00:31:14,965 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50691 states and 94803 transitions. [2018-11-23 00:31:15,060 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11980 [2018-11-23 00:31:15,060 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:15,060 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:15,062 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:15,062 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:15,063 INFO L794 eck$LassoCheckResult]: Stem: 451718#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 451719#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 450145#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 449731#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 449732#L2767 assume 0 != main_~tmp~19; 452011#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 450467#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 449140#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 449075#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 449406#L515 assume 0 == initPersonOnFloor_~floor; 449132#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 447277#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 450050#L307 assume !(0 == callOnFloor_~floorID); 449806#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 449791#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 450785#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 448402#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 448403#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 449430#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 449431#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 448082#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 448894#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 448045#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 447890#L244 assume !(0 == isFloorCalling_~floorID); 447247#L248 assume !(1 == isFloorCalling_~floorID); 447248#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 449044#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 451176#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 449983#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 449984#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 447617#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 447618#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 452220#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 453314#L1938 assume !(0 != timeShift_~tmp___9~2); 452552#L2029 assume !(1 == ~doorState~0); 452553#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 450537#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 450538#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 450468#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 450469#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 454914#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 454915#L1754 assume !(1 == ~currentHeading~0); 455196#L1764 assume !(0 == ~currentFloorID~0); 455192#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 455191#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 455189#L2935 assume !(-1 == ~expectedDirection~0); 455185#L2947 assume !(1 == ~expectedDirection~0); 455184#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 455183#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 455182#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 455178#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 455169#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 455167#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 455152#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 455143#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 455135#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 455132#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 455130#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 455129#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 455128#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 455126#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 455122#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 455120#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 455118#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 455115#L1938-1 assume !(0 != timeShift_~tmp___9~2); 455032#L2029-3 assume !(1 == ~doorState~0); 455033#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 454981#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 454982#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 455020#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 455030#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 448486#L1754-3 assume !(1 == ~currentHeading~0); 448487#L1764-9 assume !(0 == ~currentFloorID~0); 452625#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 461465#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 462859#L2935-1 assume !(-1 == ~expectedDirection~0); 462856#L2947-1 assume !(1 == ~expectedDirection~0); 462855#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 462854#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 462853#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 462851#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 462850#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 454102#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 454099#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 454096#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 454059#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 454007#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 454004#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 454001#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453997#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453993#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453994#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 455508#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 455507#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 455506#L1938-2 assume !(0 != timeShift_~tmp___9~2); 455505#L2029-6 assume !(1 == ~doorState~0); 455504#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 455503#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 453917#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453918#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453908#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453910#L1754-6 assume !(1 == ~currentHeading~0); 455639#L1764-18 assume !(0 == ~currentFloorID~0); 462533#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462531#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 462528#L2935-2 assume !(-1 == ~expectedDirection~0); 462525#L2947-2 assume !(1 == ~expectedDirection~0); 462524#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 462522#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 462517#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 462516#L515-1 assume 0 == initPersonOnFloor_~floor; 462499#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 462482#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 462480#L307-2 assume !(0 == callOnFloor_~floorID); 462477#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 462475#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 462474#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 462473#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 462471#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 462470#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 453827#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 453825#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 453819#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 453786#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 453779#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453776#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453771#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453765#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453762#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453764#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 456045#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 456044#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 456042#L1938-3 assume !(0 != timeShift_~tmp___9~2); 456041#L2029-9 assume !(1 == ~doorState~0); 456040#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 453700#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 453701#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453645#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453646#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453822#L1754-9 assume !(1 == ~currentHeading~0); 453823#L1764-27 assume !(0 == ~currentFloorID~0); 462177#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 462172#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 481600#L2935-3 assume !(-1 == ~expectedDirection~0); 481593#L2947-3 assume !(1 == ~expectedDirection~0); 481587#L2948-3 cleanup_~i~3 := 0; 481584#L2576-2 [2018-11-23 00:31:15,063 INFO L796 eck$LassoCheckResult]: Loop: 481584#L2576-2 assume !false; 481578#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 481575#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 481573#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 481569#L2584 assume 1 != cleanup_~tmp___0~8; 481566#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 481553#L244-84 assume !(0 == isFloorCalling_~floorID); 481554#L248-84 assume !(1 == isFloorCalling_~floorID); 492364#L252-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 492357#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 492348#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 492343#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 492342#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 492341#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 492340#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 492339#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 492337#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 492336#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 453562#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 453561#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 453560#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 453529#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 453525#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 453522#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 453520#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453516#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 453515#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 453509#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 453506#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 453503#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 453496#L1938-4 assume !(0 != timeShift_~tmp___9~2); 453467#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 453465#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 453466#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 453402#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 453398#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 453388#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 453389#L1754-12 assume !(1 == ~currentHeading~0); 461694#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 461695#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 481603#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 481597#L2935-4 assume !(-1 == ~expectedDirection~0); 481590#L2947-4 assume !(1 == ~expectedDirection~0); 481586#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 481584#L2576-2 [2018-11-23 00:31:15,064 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:15,065 INFO L82 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 2 times [2018-11-23 00:31:15,065 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:15,067 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:15,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:15,067 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:15,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:15,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:15,146 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:15,146 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:15,146 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:15,147 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:15,147 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:15,147 INFO L82 PathProgramCache]: Analyzing trace with hash -2065398881, now seen corresponding path program 1 times [2018-11-23 00:31:15,147 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:15,147 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:15,148 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:15,148 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 00:31:15,148 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:15,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:15,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:15,165 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:15,165 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:31:15,165 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:15,165 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:31:15,165 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:31:15,165 INFO L87 Difference]: Start difference. First operand 50691 states and 94803 transitions. cyclomatic complexity: 44113 Second operand 3 states. [2018-11-23 00:31:15,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:15,795 INFO L93 Difference]: Finished difference Result 55243 states and 103047 transitions. [2018-11-23 00:31:15,795 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:31:15,795 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55243 states and 103047 transitions. [2018-11-23 00:31:15,940 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12354 [2018-11-23 00:31:16,049 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55243 states to 55243 states and 103047 transitions. [2018-11-23 00:31:16,049 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55243 [2018-11-23 00:31:16,081 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55243 [2018-11-23 00:31:16,081 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55243 states and 103047 transitions. [2018-11-23 00:31:16,105 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:16,106 INFO L705 BuchiCegarLoop]: Abstraction has 55243 states and 103047 transitions. [2018-11-23 00:31:16,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55243 states and 103047 transitions. [2018-11-23 00:31:16,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55243 to 50155. [2018-11-23 00:31:16,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50155 states. [2018-11-23 00:31:16,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50155 states to 50155 states and 93795 transitions. [2018-11-23 00:31:16,466 INFO L728 BuchiCegarLoop]: Abstraction has 50155 states and 93795 transitions. [2018-11-23 00:31:16,466 INFO L608 BuchiCegarLoop]: Abstraction has 50155 states and 93795 transitions. [2018-11-23 00:31:16,466 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-23 00:31:16,466 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50155 states and 93795 transitions. [2018-11-23 00:31:16,563 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11684 [2018-11-23 00:31:16,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:16,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:16,565 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:16,565 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:16,565 INFO L794 eck$LassoCheckResult]: Stem: 557436#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 557437#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 555940#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 555527#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 555528#L2767 assume 0 != main_~tmp~19; 557736#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 556236#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 554986#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 554927#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 555227#L515 assume 0 == initPersonOnFloor_~floor; 554977#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 553205#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 555847#L307 assume !(0 == callOnFloor_~floorID); 555601#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 555587#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 556541#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 554297#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 554298#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 555247#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 555248#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 553598#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 553599#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 553951#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 553800#L244 assume !(0 == isFloorCalling_~floorID); 553180#L248 assume !(1 == isFloorCalling_~floorID); 553181#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 554899#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 556900#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 555781#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 555782#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 553539#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 553540#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 557700#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 557701#L1938 assume !(0 != timeShift_~tmp___9~2); 558256#L2029 assume !(1 == ~doorState~0); 558257#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 556303#L1378 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 556304#L818 stopRequestedInDirection_#t~ret13 := isTopFloor_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret13;havoc stopRequestedInDirection_#t~ret13; 556237#L1382 assume 0 != stopRequestedInDirection_~tmp~5;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 553169#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 556700#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 554445#L1754 assume !(1 == ~currentHeading~0); 554446#L1764 assume !(0 == ~currentFloorID~0); 558333#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 558323#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 557989#L2935 assume !(-1 == ~expectedDirection~0); 556029#L2947 assume !(1 == ~expectedDirection~0); 555617#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 556108#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 554230#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 554231#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 555265#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 555443#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 553764#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 553766#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 554937#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 557133#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 583457#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 583456#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 583455#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 583452#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 583446#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 583444#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 583442#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 583440#L1938-1 assume !(0 != timeShift_~tmp___9~2); 583437#L2029-3 assume !(1 == ~doorState~0); 583436#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 583433#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 583431#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 583412#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 583396#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 583357#L1754-3 assume !(1 == ~currentHeading~0); 583348#L1764-9 assume !(0 == ~currentFloorID~0); 583342#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 583340#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 583337#L2935-1 assume !(-1 == ~expectedDirection~0); 583334#L2947-1 assume !(1 == ~expectedDirection~0); 583332#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 583330#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 583329#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 583327#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 583328#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 594205#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 588188#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 588189#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 583285#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 583281#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 583271#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 583269#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 583267#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 583259#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 583254#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 583248#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 583246#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 583241#L1938-2 assume !(0 != timeShift_~tmp___9~2); 583242#L2029-6 assume !(1 == ~doorState~0); 583237#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 583238#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 588708#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 583184#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 583113#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 583072#L1754-6 assume !(1 == ~currentHeading~0); 583063#L1764-18 assume !(0 == ~currentFloorID~0); 583057#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 583055#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 583052#L2935-2 assume !(-1 == ~expectedDirection~0); 583049#L2947-2 assume !(1 == ~expectedDirection~0); 583048#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 583046#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 583041#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 583040#L515-1 assume 0 == initPersonOnFloor_~floor; 583022#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 582974#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 582967#L307-2 assume !(0 == callOnFloor_~floorID); 555817#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 555591#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 556550#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 582735#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 582734#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 576280#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 559878#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 559876#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 559870#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 559865#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 559859#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559857#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559856#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 559854#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 559850#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 559841#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 559837#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 559832#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 559797#L1938-3 assume !(0 != timeShift_~tmp___9~2); 559796#L2029-9 assume !(1 == ~doorState~0); 559794#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 559725#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 559633#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 559623#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 559606#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 559605#L1754-9 assume !(1 == ~currentHeading~0); 559592#L1764-27 assume !(0 == ~currentFloorID~0); 559588#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 559583#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 559579#L2935-3 assume !(-1 == ~expectedDirection~0); 559575#L2947-3 assume !(1 == ~expectedDirection~0); 559535#L2948-3 cleanup_~i~3 := 0; 559533#L2576-2 [2018-11-23 00:31:16,566 INFO L796 eck$LassoCheckResult]: Loop: 559533#L2576-2 assume !false; 559532#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 559531#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 559530#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 559527#L2584 assume 1 != cleanup_~tmp___0~8; 559525#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559524#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559523#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 559521#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 559519#L1286 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559517#L244-85 assume !(0 == isFloorCalling_~floorID); 559504#L248-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559491#L271-85 anyStopRequested_#t~ret8 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret8;havoc anyStopRequested_#t~ret8; 559479#L1293 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 559460#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 559397#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 559398#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 559381#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 559382#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 559325#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 559326#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 559199#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 559184#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 559175#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 559167#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 559164#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 559162#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 559161#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 559160#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 559159#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 559154#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 559152#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 559151#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 559149#L1938-4 assume !(0 != timeShift_~tmp___9~2); 559148#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 559147#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 559144#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 559145#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 558973#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 558967#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 558958#L1754-12 assume !(1 == ~currentHeading~0); 558949#L1764-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 558940#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 558935#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 559601#L2935-4 assume !(-1 == ~expectedDirection~0); 559537#L2947-4 assume !(1 == ~expectedDirection~0); 559534#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 559533#L2576-2 [2018-11-23 00:31:16,571 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:16,571 INFO L82 PathProgramCache]: Analyzing trace with hash -350699030, now seen corresponding path program 3 times [2018-11-23 00:31:16,571 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:16,571 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:16,572 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:16,572 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:16,572 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:16,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:16,634 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:16,635 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:16,635 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:16,635 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:16,635 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:16,635 INFO L82 PathProgramCache]: Analyzing trace with hash -790064123, now seen corresponding path program 1 times [2018-11-23 00:31:16,635 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:16,635 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:16,636 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:16,636 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-23 00:31:16,636 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:16,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:16,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:16,653 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:16,654 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:16,654 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:16,654 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 00:31:16,654 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 00:31:16,654 INFO L87 Difference]: Start difference. First operand 50155 states and 93795 transitions. cyclomatic complexity: 43641 Second operand 4 states. [2018-11-23 00:31:17,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:17,074 INFO L93 Difference]: Finished difference Result 92453 states and 173303 transitions. [2018-11-23 00:31:17,074 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:31:17,074 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 92453 states and 173303 transitions. [2018-11-23 00:31:17,324 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22314 [2018-11-23 00:31:19,252 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 92453 states to 92453 states and 173303 transitions. [2018-11-23 00:31:19,252 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92453 [2018-11-23 00:31:19,286 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92453 [2018-11-23 00:31:19,287 INFO L73 IsDeterministic]: Start isDeterministic. Operand 92453 states and 173303 transitions. [2018-11-23 00:31:19,318 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:19,318 INFO L705 BuchiCegarLoop]: Abstraction has 92453 states and 173303 transitions. [2018-11-23 00:31:19,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92453 states and 173303 transitions. [2018-11-23 00:31:19,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92453 to 50207. [2018-11-23 00:31:19,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50207 states. [2018-11-23 00:31:19,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50207 states to 50207 states and 93847 transitions. [2018-11-23 00:31:19,766 INFO L728 BuchiCegarLoop]: Abstraction has 50207 states and 93847 transitions. [2018-11-23 00:31:19,766 INFO L608 BuchiCegarLoop]: Abstraction has 50207 states and 93847 transitions. [2018-11-23 00:31:19,766 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-23 00:31:19,766 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50207 states and 93847 transitions. [2018-11-23 00:31:19,861 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11696 [2018-11-23 00:31:19,861 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:19,861 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:19,863 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:19,863 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:19,863 INFO L794 eck$LassoCheckResult]: Stem: 700320#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 700321#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 698681#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 698255#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 698256#L2767 assume 0 != main_~tmp~19; 700618#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 699016#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 697639#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 697580#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 697943#L515 assume 0 == initPersonOnFloor_~floor; 697631#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 695830#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 698585#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 698586#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 699353#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 696941#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 696942#L2804 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 697962#L2805 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 697964#L1191 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 696232#L1212 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 696233#L2809 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 700973#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 700974#L244 assume !(0 == isFloorCalling_~floorID); 695805#L248 assume !(1 == isFloorCalling_~floorID); 695806#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 701931#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 701932#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 698517#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 698518#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 702827#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 702826#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 702825#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 702824#L1938 assume !(0 != timeShift_~tmp___9~2); 702823#L2029 assume !(1 == ~doorState~0); 702822#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702821#L1378 assume !(1 == stopRequestedInDirection_~dir); 702820#L1547 assume !(0 == ~currentFloorID~0); 702819#L1553 assume !(~currentFloorID~0 > 0); 699035#L1568 assume ~currentFloorID~0 > 0; 702844#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 702843#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 699530#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 699531#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 697088#L1754 assume !(1 == ~currentHeading~0); 697089#L1764 assume !(0 == ~currentFloorID~0); 701252#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 701238#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 705886#L2935 assume !(-1 == ~expectedDirection~0); 705879#L2947 assume !(1 == ~expectedDirection~0); 705046#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 705045#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 705044#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 705043#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 705042#L2866-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 698495#L1191-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 696154#L1212-16 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 696155#L2870-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 699525#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 696386#L244-21 assume !(0 == isFloorCalling_~floorID); 696387#L248-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 697071#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 699751#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 698469#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 698470#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 696130#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 696131#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 700836#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 703205#L1938-1 assume !(0 != timeShift_~tmp___9~2); 703202#L2029-3 assume !(1 == ~doorState~0); 703203#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 709326#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 709296#L1547-2 assume !(0 == ~currentFloorID~0); 702313#L1553-2 assume !(~currentFloorID~0 > 0); 696036#L1568-2 assume ~currentFloorID~0 > 0; 696038#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697982#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 695814#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 703562#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 697020#L1754-3 assume !(1 == ~currentHeading~0); 697021#L1764-9 assume !(0 == ~currentFloorID~0); 701215#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 701190#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 722001#L2935-1 assume !(-1 == ~expectedDirection~0); 721949#L2947-1 assume !(1 == ~expectedDirection~0); 721891#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 721889#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 721887#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 721885#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 721880#L2866-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 721878#L1191-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 721874#L1212-27 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 721563#L2870-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 721561#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 721559#L244-42 assume !(0 == isFloorCalling_~floorID); 721555#L248-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 721557#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 727775#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 727774#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 727773#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 727769#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 727767#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 727766#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 727765#L1938-2 assume !(0 != timeShift_~tmp___9~2); 702485#L2029-6 assume !(1 == ~doorState~0); 702395#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702396#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 709793#L1547-4 assume !(0 == ~currentFloorID~0); 702367#L1553-4 assume !(~currentFloorID~0 > 0); 702365#L1568-4 assume ~currentFloorID~0 > 0; 709776#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697986#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 695736#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 710215#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 728548#L1754-6 assume !(1 == ~currentHeading~0); 701193#L1764-18 assume !(0 == ~currentFloorID~0); 701194#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 745478#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 745475#L2935-2 assume !(-1 == ~expectedDirection~0); 745472#L2947-2 assume !(1 == ~expectedDirection~0); 745471#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 745466#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 745461#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 745460#L515-1 assume 0 == initPersonOnFloor_~floor; 732664#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 732649#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 732650#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 736873#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 736872#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 736871#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 736870#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 736865#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 736862#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 736857#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 736844#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 736840#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 736839#L244-63 assume !(0 == isFloorCalling_~floorID); 736831#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 736829#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 736311#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 736312#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 736836#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 736834#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 736313#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 736314#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 736298#L1938-3 assume !(0 != timeShift_~tmp___9~2); 709521#L2029-9 assume !(1 == ~doorState~0); 702479#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702478#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 702475#L1547-6 assume !(0 == ~currentFloorID~0); 699155#L1553-6 assume !(~currentFloorID~0 > 0); 696087#L1568-6 assume ~currentFloorID~0 > 0; 696089#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697863#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 702467#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 707201#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 696980#L1754-9 assume !(1 == ~currentHeading~0); 696981#L1764-27 assume !(0 == ~currentFloorID~0); 700983#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 700949#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 745469#L2935-3 assume !(-1 == ~expectedDirection~0); 733698#L2947-3 assume !(1 == ~expectedDirection~0); 733489#L2948-3 cleanup_~i~3 := 0; 733486#L2576-2 [2018-11-23 00:31:19,863 INFO L796 eck$LassoCheckResult]: Loop: 733486#L2576-2 assume !false; 733484#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 733482#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 733479#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 733477#L2584 assume 1 != cleanup_~tmp___0~8; 733476#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 733475#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 733474#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 733445#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 733444#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 733443#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 733442#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 733441#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 733440#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 733439#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 723348#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 723349#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 743824#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 733699#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 701249#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 737612#L244-89 assume !(0 == isFloorCalling_~floorID); 737595#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 737593#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 735324#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 735325#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 744917#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 744915#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 700822#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 700824#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 702487#L1938-4 assume !(0 != timeShift_~tmp___9~2); 702488#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 702405#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 702402#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 702388#L1547-8 assume !(0 == ~currentFloorID~0); 702389#L1553-8 assume !(~currentFloorID~0 > 0); 702382#L1568-8 assume ~currentFloorID~0 > 0; 733516#L1570-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 697976#L1571-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 697977#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 724934#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 724935#L1754-12 assume !(1 == ~currentHeading~0); 724924#L1764-36 assume !(0 == ~currentFloorID~0); 724925#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 733497#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 733495#L2935-4 assume !(-1 == ~expectedDirection~0); 733492#L2947-4 assume !(1 == ~expectedDirection~0); 733488#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 733486#L2576-2 [2018-11-23 00:31:19,870 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:19,870 INFO L82 PathProgramCache]: Analyzing trace with hash -540053120, now seen corresponding path program 1 times [2018-11-23 00:31:19,870 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:19,870 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:19,871 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:19,871 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:19,871 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:19,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:19,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:19,929 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:19,929 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:19,930 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:19,930 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:19,930 INFO L82 PathProgramCache]: Analyzing trace with hash 22950895, now seen corresponding path program 1 times [2018-11-23 00:31:19,930 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:19,930 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:19,930 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:19,931 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:19,931 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:19,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:19,966 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:19,966 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:19,966 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:31:19,966 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:19,966 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:31:19,966 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:31:19,967 INFO L87 Difference]: Start difference. First operand 50207 states and 93847 transitions. cyclomatic complexity: 43641 Second operand 5 states. [2018-11-23 00:31:20,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:20,922 INFO L93 Difference]: Finished difference Result 66091 states and 123077 transitions. [2018-11-23 00:31:20,923 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 00:31:20,923 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66091 states and 123077 transitions. [2018-11-23 00:31:21,101 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15724 [2018-11-23 00:31:21,232 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66091 states to 66091 states and 123077 transitions. [2018-11-23 00:31:21,232 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66091 [2018-11-23 00:31:21,271 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66091 [2018-11-23 00:31:21,271 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66091 states and 123077 transitions. [2018-11-23 00:31:21,300 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:21,300 INFO L705 BuchiCegarLoop]: Abstraction has 66091 states and 123077 transitions. [2018-11-23 00:31:21,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66091 states and 123077 transitions. [2018-11-23 00:31:21,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66091 to 65613. [2018-11-23 00:31:21,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 65613 states. [2018-11-23 00:31:21,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65613 states to 65613 states and 122347 transitions. [2018-11-23 00:31:21,780 INFO L728 BuchiCegarLoop]: Abstraction has 65613 states and 122347 transitions. [2018-11-23 00:31:21,780 INFO L608 BuchiCegarLoop]: Abstraction has 65613 states and 122347 transitions. [2018-11-23 00:31:21,780 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-23 00:31:21,780 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65613 states and 122347 transitions. [2018-11-23 00:31:21,918 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15586 [2018-11-23 00:31:21,918 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:21,918 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:21,922 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:21,922 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:21,923 INFO L794 eck$LassoCheckResult]: Stem: 816464#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 816465#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 814886#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 814461#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 814462#L2767 assume 0 != main_~tmp~19; 816767#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 815208#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 813904#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 813846#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 814175#L515 assume 0 == initPersonOnFloor_~floor; 813897#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 812132#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 814792#L307 assume !(0 == callOnFloor_~floorID); 814539#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 814520#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 815537#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 813228#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 813229#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 814206#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 814370#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 812488#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 812489#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 812886#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 812721#L244 assume !(0 == isFloorCalling_~floorID); 812110#L248 assume !(1 == isFloorCalling_~floorID); 812111#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 813818#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 817993#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 819923#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 819922#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 819918#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 819916#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 819915#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 819913#L1938 assume !(0 != timeShift_~tmp___9~2); 819912#L2029 assume !(1 == ~doorState~0); 819911#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 819909#L1378 assume !(1 == stopRequestedInDirection_~dir); 819908#L1547 assume !(0 == ~currentFloorID~0); 819907#L1553 assume ~currentFloorID~0 > 0; 819905#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 819906#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 820670#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 819874#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 819866#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 819864#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 819862#L1754 assume !(1 == ~currentHeading~0); 819860#L1764 assume !(0 == ~currentFloorID~0); 819815#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 819113#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 818892#L2935 assume !(-1 == ~expectedDirection~0); 818887#L2947 assume !(1 == ~expectedDirection~0); 818886#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 818885#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 818883#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 818878#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 818879#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 819544#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 819542#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 819060#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 818845#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 818842#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 818696#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818694#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 818693#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 818689#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 818685#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 818682#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 818681#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 818677#L1938-1 assume !(0 != timeShift_~tmp___9~2); 818676#L2029-3 assume !(1 == ~doorState~0); 818675#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 818673#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 818674#L1547-2 assume !(0 == ~currentFloorID~0); 818644#L1553-2 assume ~currentFloorID~0 > 0; 818645#L1554-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 818725#L244-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818721#L271-27 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 818409#L1558-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 818387#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 818383#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 818380#L1754-3 assume !(1 == ~currentHeading~0); 818315#L1764-9 assume !(0 == ~currentFloorID~0); 818303#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 818295#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 818290#L2935-1 assume !(-1 == ~expectedDirection~0); 818285#L2947-1 assume !(1 == ~expectedDirection~0); 818282#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 818278#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 818274#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 818275#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 833457#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 818256#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 818239#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 818230#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 818222#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 818219#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 818217#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818216#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 818215#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 818213#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 818209#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 818207#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 818206#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 818204#L1938-2 assume !(0 != timeShift_~tmp___9~2); 818203#L2029-6 assume !(1 == ~doorState~0); 818202#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 818200#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 818175#L1547-4 assume !(0 == ~currentFloorID~0); 818176#L1553-4 assume ~currentFloorID~0 > 0; 815280#L1554-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 815281#L244-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 818014#L271-48 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 815203#L1558-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 815204#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 836795#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 836833#L1754-6 assume !(1 == ~currentHeading~0); 836815#L1764-18 assume !(0 == ~currentFloorID~0); 836805#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 836801#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 856311#L2935-2 assume !(-1 == ~expectedDirection~0); 856308#L2947-2 assume !(1 == ~expectedDirection~0); 856307#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 856305#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 856300#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 856299#L515-1 assume 0 == initPersonOnFloor_~floor; 833384#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 833366#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 833360#L307-2 assume !(0 == callOnFloor_~floorID); 833361#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 868485#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 868484#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 868483#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 868481#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 868476#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 831782#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 831781#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 831776#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 831772#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 831766#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 831765#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 831764#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 831762#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 829022#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 829024#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 840083#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 840081#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 840078#L1938-3 assume !(0 != timeShift_~tmp___9~2); 840075#L2029-9 assume !(1 == ~doorState~0); 840073#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 840070#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 840071#L1547-6 assume !(0 == ~currentFloorID~0); 862382#L1553-6 assume !(~currentFloorID~0 > 0); 872758#L1568-6 assume ~currentFloorID~0 > 0; 812380#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 814110#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 814194#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 877229#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 813267#L1754-9 assume !(1 == ~currentHeading~0); 813268#L1764-27 assume !(0 == ~currentFloorID~0); 817131#L1764-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 840370#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 857821#L2935-3 assume !(-1 == ~expectedDirection~0); 857818#L2947-3 assume !(1 == ~expectedDirection~0); 857813#L2948-3 cleanup_~i~3 := 0; 857808#L2576-2 [2018-11-23 00:31:21,923 INFO L796 eck$LassoCheckResult]: Loop: 857808#L2576-2 assume !false; 857805#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 857803#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 857801#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 857799#L2584 assume 1 != cleanup_~tmp___0~8; 857797#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 857796#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 857795#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 857792#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 857790#L1286 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 857787#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 857784#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 857782#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 857780#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 857778#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 857775#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 857776#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 839958#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 862571#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 857733#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 857732#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 857730#L244-89 assume !(0 == isFloorCalling_~floorID); 857724#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 857725#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 861290#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 861289#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 861286#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 861284#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 861282#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 861281#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 861274#L1938-4 assume !(0 != timeShift_~tmp___9~2); 852204#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 849609#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 849608#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 849607#L1547-8 assume !(0 == ~currentFloorID~0); 849606#L1553-8 assume ~currentFloorID~0 > 0; 842352#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 842350#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 840853#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 840399#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 840382#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 872669#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 872668#L1754-12 assume !(1 == ~currentHeading~0); 872665#L1764-36 assume !(0 == ~currentFloorID~0); 840142#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 840136#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 857827#L2935-4 assume !(-1 == ~expectedDirection~0); 857824#L2947-4 assume !(1 == ~expectedDirection~0); 857812#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 857808#L2576-2 [2018-11-23 00:31:21,930 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:21,931 INFO L82 PathProgramCache]: Analyzing trace with hash 1599383040, now seen corresponding path program 1 times [2018-11-23 00:31:21,931 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:21,931 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:21,931 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:21,931 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:21,931 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:21,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:21,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:21,991 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:21,991 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:21,992 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:21,992 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:21,992 INFO L82 PathProgramCache]: Analyzing trace with hash 1206194521, now seen corresponding path program 1 times [2018-11-23 00:31:21,992 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:21,992 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:21,993 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:21,993 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:21,993 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:21,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:22,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:22,027 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:22,027 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 00:31:22,027 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:22,027 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 00:31:22,027 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:31:22,027 INFO L87 Difference]: Start difference. First operand 65613 states and 122347 transitions. cyclomatic complexity: 56735 Second operand 7 states. [2018-11-23 00:31:25,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:25,762 INFO L93 Difference]: Finished difference Result 241985 states and 453139 transitions. [2018-11-23 00:31:25,762 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-23 00:31:25,763 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 241985 states and 453139 transitions. [2018-11-23 00:31:26,541 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51494 [2018-11-23 00:31:27,154 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 241985 states to 241985 states and 453139 transitions. [2018-11-23 00:31:27,154 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 241985 [2018-11-23 00:31:27,326 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 241985 [2018-11-23 00:31:27,326 INFO L73 IsDeterministic]: Start isDeterministic. Operand 241985 states and 453139 transitions. [2018-11-23 00:31:27,443 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:27,443 INFO L705 BuchiCegarLoop]: Abstraction has 241985 states and 453139 transitions. [2018-11-23 00:31:27,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241985 states and 453139 transitions. [2018-11-23 00:31:29,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241985 to 65613. [2018-11-23 00:31:29,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 65613 states. [2018-11-23 00:31:29,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65613 states to 65613 states and 122318 transitions. [2018-11-23 00:31:29,189 INFO L728 BuchiCegarLoop]: Abstraction has 65613 states and 122318 transitions. [2018-11-23 00:31:29,189 INFO L608 BuchiCegarLoop]: Abstraction has 65613 states and 122318 transitions. [2018-11-23 00:31:29,189 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-23 00:31:29,189 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65613 states and 122318 transitions. [2018-11-23 00:31:29,328 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15586 [2018-11-23 00:31:29,328 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:29,328 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:29,331 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:29,331 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:29,331 INFO L794 eck$LassoCheckResult]: Stem: 1124312#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1124313#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1122676#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1122248#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1122249#L2767 assume 0 != main_~tmp~19; 1124612#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1122997#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1121567#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1121507#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1121908#L515 assume 0 == initPersonOnFloor_~floor; 1121559#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1119785#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1122580#L307 assume !(0 == callOnFloor_~floorID); 1122325#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1122310#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1123353#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1120883#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1120884#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1121988#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1122159#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1120560#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1123423#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1120541#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1120380#L244 assume !(0 == isFloorCalling_~floorID); 1120381#L248 assume !(1 == isFloorCalling_~floorID); 1121550#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1121478#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1123761#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1123763#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1123464#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1120536#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1124830#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1124831#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1125992#L1938 assume !(0 != timeShift_~tmp___9~2); 1125993#L2029 assume !(1 == ~doorState~0); 1125171#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1125172#L1378 assume !(1 == stopRequestedInDirection_~dir); 1122279#L1547 assume !(0 == ~currentFloorID~0); 1122280#L1553 assume ~currentFloorID~0 > 0; 1123099#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1123018#L1568 assume ~currentFloorID~0 > 0; 1121841#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1121842#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1126134#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1126135#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1143961#L1754 assume !(1 == ~currentHeading~0); 1143959#L1764 assume !(0 == ~currentFloorID~0); 1143954#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1143953#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1143951#L2935 assume !(-1 == ~expectedDirection~0); 1143947#L2947 assume !(1 == ~expectedDirection~0); 1143928#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1143926#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1143924#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1143921#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1143915#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1143912#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1143908#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1143843#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1143825#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1143781#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1143779#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1143778#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1143777#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1143775#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1143774#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1143766#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1143745#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1143727#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1143610#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1143581#L2029-3 assume !(1 == ~doorState~0); 1143579#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1143577#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1143578#L1547-2 assume !(0 == ~currentFloorID~0); 1143652#L1553-2 assume !(~currentFloorID~0 > 0); 1143728#L1568-2 assume ~currentFloorID~0 > 0; 1143729#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1143854#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1143838#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1143818#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1143813#L1754-3 assume !(1 == ~currentHeading~0); 1143809#L1764-9 assume !(0 == ~currentFloorID~0); 1143435#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1143430#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1149069#L2935-1 assume !(-1 == ~expectedDirection~0); 1149066#L2947-1 assume !(1 == ~expectedDirection~0); 1149065#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1149056#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1143406#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1143407#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1148790#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1143266#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1136479#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1136418#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1136420#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1136319#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1136320#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1136820#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1136817#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1136813#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1136810#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1136804#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1136800#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1136797#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1136793#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1136790#L2029-6 assume !(1 == ~doorState~0); 1136693#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1136691#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1136692#L1547-4 assume !(0 == ~currentFloorID~0); 1136821#L1553-4 assume !(~currentFloorID~0 > 0); 1136818#L1568-4 assume ~currentFloorID~0 > 0; 1136819#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1136939#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1136920#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1136909#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1136903#L1754-6 assume !(1 == ~currentHeading~0); 1136883#L1764-18 assume !(0 == ~currentFloorID~0); 1136529#L1764-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1136525#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1165759#L2935-2 assume !(-1 == ~expectedDirection~0); 1165756#L2947-2 assume !(1 == ~expectedDirection~0); 1165755#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1165753#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1165748#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1165747#L515-1 assume 0 == initPersonOnFloor_~floor; 1165713#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1165696#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1165694#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1165695#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1178856#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1178854#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1178850#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1178849#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1178847#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1178842#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1178438#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1173042#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1173041#L244-63 assume !(0 == isFloorCalling_~floorID); 1173038#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1173036#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1173035#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1173034#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1173031#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1173029#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1173027#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1173021#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1173018#L1938-3 assume !(0 != timeShift_~tmp___9~2); 1173019#L2029-9 assume !(1 == ~doorState~0); 1179115#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1123236#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 1123237#L1547-6 assume !(0 == ~currentFloorID~0); 1179114#L1553-6 assume ~currentFloorID~0 > 0; 1123081#L1554-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1120030#L1568-6 assume ~currentFloorID~0 > 0; 1120031#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1121965#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1119946#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1184804#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1120924#L1754-9 assume !(1 == ~currentHeading~0); 1120925#L1764-27 assume !(0 == ~currentFloorID~0); 1124981#L1764-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1184825#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1184823#L2935-3 assume !(-1 == ~expectedDirection~0); 1184817#L2947-3 assume !(1 == ~expectedDirection~0); 1184812#L2948-3 cleanup_~i~3 := 0; 1184810#L2576-2 [2018-11-23 00:31:29,332 INFO L796 eck$LassoCheckResult]: Loop: 1184810#L2576-2 assume !false; 1184808#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1184806#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1184805#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 1184415#L2584 assume 1 != cleanup_~tmp___0~8; 1172596#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1172595#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1172594#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1172593#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1172592#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1172590#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 1172588#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1172586#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1172585#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1172580#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1172579#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1172564#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1172556#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1172548#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1172547#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1172546#L244-89 assume !(0 == isFloorCalling_~floorID); 1172543#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1172541#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1172540#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1172539#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1172531#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1172528#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1172526#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1172525#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1172518#L1938-4 assume !(0 != timeShift_~tmp___9~2); 1158082#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1180827#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1157992#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 1157993#L1547-8 assume !(0 == ~currentFloorID~0); 1157989#L1553-8 assume ~currentFloorID~0 > 0; 1157743#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1180825#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1125776#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1125777#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1119967#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1184801#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1120840#L1754-12 assume !(1 == ~currentHeading~0); 1120842#L1764-36 assume !(0 == ~currentFloorID~0); 1124967#L1764-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1184866#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1184820#L2935-4 assume !(-1 == ~expectedDirection~0); 1184814#L2947-4 assume !(1 == ~expectedDirection~0); 1184811#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1184810#L2576-2 [2018-11-23 00:31:29,339 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:29,339 INFO L82 PathProgramCache]: Analyzing trace with hash -1417155902, now seen corresponding path program 1 times [2018-11-23 00:31:29,339 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:29,339 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:29,340 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:29,340 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:29,340 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:29,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:29,402 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:29,402 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:29,402 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:29,402 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:29,403 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:29,403 INFO L82 PathProgramCache]: Analyzing trace with hash -377856624, now seen corresponding path program 1 times [2018-11-23 00:31:29,403 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:29,403 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:29,403 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:29,404 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:29,404 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:29,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:29,447 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:29,447 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:29,447 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:31:29,448 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:29,448 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:31:29,448 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:31:29,448 INFO L87 Difference]: Start difference. First operand 65613 states and 122318 transitions. cyclomatic complexity: 56707 Second operand 5 states. [2018-11-23 00:31:30,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:30,169 INFO L93 Difference]: Finished difference Result 118983 states and 221474 transitions. [2018-11-23 00:31:30,169 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 00:31:30,170 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 118983 states and 221474 transitions. [2018-11-23 00:31:30,523 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 30968 [2018-11-23 00:31:30,789 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 118983 states to 118983 states and 221474 transitions. [2018-11-23 00:31:30,789 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 118983 [2018-11-23 00:31:30,863 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 118983 [2018-11-23 00:31:30,863 INFO L73 IsDeterministic]: Start isDeterministic. Operand 118983 states and 221474 transitions. [2018-11-23 00:31:30,917 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:30,917 INFO L705 BuchiCegarLoop]: Abstraction has 118983 states and 221474 transitions. [2018-11-23 00:31:30,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118983 states and 221474 transitions. [2018-11-23 00:31:31,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118983 to 116511. [2018-11-23 00:31:31,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116511 states. [2018-11-23 00:31:31,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116511 states to 116511 states and 217568 transitions. [2018-11-23 00:31:31,835 INFO L728 BuchiCegarLoop]: Abstraction has 116511 states and 217568 transitions. [2018-11-23 00:31:31,835 INFO L608 BuchiCegarLoop]: Abstraction has 116511 states and 217568 transitions. [2018-11-23 00:31:31,835 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-23 00:31:31,835 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 116511 states and 217568 transitions. [2018-11-23 00:31:32,058 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 30272 [2018-11-23 00:31:32,058 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:32,058 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:32,060 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:32,060 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:32,061 INFO L794 eck$LassoCheckResult]: Stem: 1308860#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1308861#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1307194#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1306778#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1306779#L2767 assume 0 != main_~tmp~19; 1309165#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1307531#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1306173#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1306114#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1306478#L515 assume 0 == initPersonOnFloor_~floor; 1306166#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1304401#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1307100#L307 assume !(0 == callOnFloor_~floorID); 1306853#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1306839#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1307882#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1305495#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1305496#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1306525#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1306690#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1304752#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1304753#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1309551#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1309552#L244 assume !(0 == isFloorCalling_~floorID); 1304376#L248 assume !(1 == isFloorCalling_~floorID); 1304377#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1310541#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1310542#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1307038#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1307039#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1304735#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1304736#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1310616#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1310617#L1938 assume !(0 != timeShift_~tmp___9~2); 1309751#L2029 assume !(1 == ~doorState~0); 1309752#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1307608#L1378 assume !(1 == stopRequestedInDirection_~dir); 1307609#L1547 assume !(0 == ~currentFloorID~0); 1307688#L1553 assume ~currentFloorID~0 > 0; 1307689#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1307548#L1568 assume ~currentFloorID~0 > 0; 1306417#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1306418#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1308085#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1308086#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1310692#L1754 assume !(1 == ~currentHeading~0); 1312072#L1764 assume !(0 == ~currentFloorID~0); 1312070#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1311143#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1312068#L2935 assume !(-1 == ~expectedDirection~0); 1312064#L2947 assume !(1 == ~expectedDirection~0); 1312017#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1312014#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1312013#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1312012#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1312010#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1312008#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1312006#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1312004#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1312002#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1312001#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1312000#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1311999#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1311998#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1311997#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1311996#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1311992#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1311991#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1311990#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1311988#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1311987#L2029-3 assume !(1 == ~doorState~0); 1311986#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1311984#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1311971#L1547-2 assume !(0 == ~currentFloorID~0); 1311972#L1553-2 assume !(~currentFloorID~0 > 0); 1312032#L1568-2 assume ~currentFloorID~0 > 0; 1318847#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1331672#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1312357#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1314889#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1314890#L1754-3 assume !(1 == ~currentHeading~0); 1331493#L1764-9 assume !(0 == ~currentFloorID~0); 1314597#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1322457#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1336532#L2935-1 assume !(-1 == ~expectedDirection~0); 1336528#L2947-1 assume !(1 == ~expectedDirection~0); 1336523#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1336521#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1336522#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1336462#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1322418#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1336223#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1336222#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1336221#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1336220#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1336219#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1336217#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1336216#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1336214#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1336209#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1336104#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1336100#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1336099#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1336096#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1336094#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1336092#L2029-6 assume !(1 == ~doorState~0); 1336091#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1336087#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1336088#L1547-4 assume !(0 == ~currentFloorID~0); 1336461#L1553-4 assume !(~currentFloorID~0 > 0); 1345866#L1568-4 assume ~currentFloorID~0 > 0; 1304626#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1306522#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1304535#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1308110#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1417946#L1754-6 assume !(1 == ~currentHeading~0); 1336008#L1764-18 assume !(0 == ~currentFloorID~0); 1309796#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1309754#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1309453#L2935-2 assume !(-1 == ~expectedDirection~0); 1307314#L2947-2 assume !(1 == ~expectedDirection~0); 1306861#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1306174#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1306121#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1306481#L515-1 assume 0 == initPersonOnFloor_~floor; 1306482#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1414798#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1414797#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1306843#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1360983#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1360976#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1360974#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1315205#L2866-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1380440#L1191-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1380434#L1212-38 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1380430#L2870-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1380429#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1380428#L244-63 assume !(0 == isFloorCalling_~floorID); 1380425#L248-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1380423#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1378722#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1378723#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1378731#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1378729#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1378726#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1378727#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1378712#L1938-3 assume !(0 != timeShift_~tmp___9~2); 1378713#L2029-9 assume !(1 == ~doorState~0); 1408041#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1408039#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 1408038#L1547-6 assume !(0 == ~currentFloorID~0); 1408037#L1553-6 assume ~currentFloorID~0 > 0; 1407806#L1554-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1408008#L1568-6 assume ~currentFloorID~0 > 0; 1407804#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1408022#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1407995#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1407996#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1420430#L1754-9 assume !(1 == ~currentHeading~0); 1347425#L1764-27 assume !(0 == ~currentFloorID~0); 1347420#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1347412#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1407622#L2935-3 assume !(-1 == ~expectedDirection~0); 1407617#L2947-3 assume !(1 == ~expectedDirection~0); 1407614#L2948-3 cleanup_~i~3 := 0; 1407610#L2576-2 [2018-11-23 00:31:32,061 INFO L796 eck$LassoCheckResult]: Loop: 1407610#L2576-2 assume !false; 1407520#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1406911#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1371703#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 1371702#L2584 assume 1 != cleanup_~tmp___0~8; 1371701#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1371700#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1371699#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1371698#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1371696#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1371694#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 1371689#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1361001#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1361000#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1353289#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1353288#L2866-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1346854#L1191-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1380395#L1212-49 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1380390#L2870-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1380389#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1380388#L244-89 assume !(0 == isFloorCalling_~floorID); 1380385#L248-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1380383#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1380382#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1380381#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1380378#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1380376#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1380374#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1380373#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1380365#L1938-4 assume !(0 != timeShift_~tmp___9~2); 1380366#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1411052#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1411050#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 1411049#L1547-8 assume !(0 == ~currentFloorID~0); 1346378#L1553-8 assume ~currentFloorID~0 > 0; 1346379#L1554-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1304599#L244-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1304600#L271-95 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1310404#L1558-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1346249#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1409374#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1409363#L1754-12 assume !(1 == ~currentHeading~0); 1309545#L1764-36 assume !(0 == ~currentFloorID~0); 1309546#L1764-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1407607#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1408249#L2935-4 assume !(-1 == ~expectedDirection~0); 1408245#L2947-4 assume !(1 == ~expectedDirection~0); 1407613#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1407610#L2576-2 [2018-11-23 00:31:32,068 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:32,068 INFO L82 PathProgramCache]: Analyzing trace with hash 523853186, now seen corresponding path program 1 times [2018-11-23 00:31:32,068 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:32,069 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:32,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:32,069 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:32,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:32,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:32,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:32,135 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:32,135 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:32,136 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:32,136 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:32,137 INFO L82 PathProgramCache]: Analyzing trace with hash -376009582, now seen corresponding path program 1 times [2018-11-23 00:31:32,137 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:32,137 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:32,137 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:32,137 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:32,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:32,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:32,156 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:32,156 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:32,156 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:31:32,156 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:32,156 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:31:32,156 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:31:32,157 INFO L87 Difference]: Start difference. First operand 116511 states and 217568 transitions. cyclomatic complexity: 101059 Second operand 3 states. [2018-11-23 00:31:32,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:32,599 INFO L93 Difference]: Finished difference Result 151431 states and 282243 transitions. [2018-11-23 00:31:32,599 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:31:32,599 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 151431 states and 282243 transitions. [2018-11-23 00:31:33,635 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 38300 [2018-11-23 00:31:33,889 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 151431 states to 151431 states and 282243 transitions. [2018-11-23 00:31:33,889 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 151431 [2018-11-23 00:31:33,958 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 151431 [2018-11-23 00:31:33,958 INFO L73 IsDeterministic]: Start isDeterministic. Operand 151431 states and 282243 transitions. [2018-11-23 00:31:34,013 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:34,014 INFO L705 BuchiCegarLoop]: Abstraction has 151431 states and 282243 transitions. [2018-11-23 00:31:34,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151431 states and 282243 transitions. [2018-11-23 00:31:34,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151431 to 148487. [2018-11-23 00:31:34,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 148487 states. [2018-11-23 00:31:35,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148487 states to 148487 states and 277239 transitions. [2018-11-23 00:31:35,075 INFO L728 BuchiCegarLoop]: Abstraction has 148487 states and 277239 transitions. [2018-11-23 00:31:35,075 INFO L608 BuchiCegarLoop]: Abstraction has 148487 states and 277239 transitions. [2018-11-23 00:31:35,075 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-23 00:31:35,075 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148487 states and 277239 transitions. [2018-11-23 00:31:35,345 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 37440 [2018-11-23 00:31:35,345 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:35,345 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:35,348 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:35,348 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:35,348 INFO L794 eck$LassoCheckResult]: Stem: 1576745#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1576746#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1575102#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1574682#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1574683#L2767 assume 0 != main_~tmp~19; 1577049#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1575430#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1574102#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1574044#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1574391#L515 assume 0 == initPersonOnFloor_~floor; 1574095#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1572353#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1575002#L307 assume !(0 == callOnFloor_~floorID); 1574757#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1574742#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1575748#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1573433#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1573434#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1574427#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1574592#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1572704#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1572705#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1573096#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1577433#L244 assume !(0 == isFloorCalling_~floorID); 1572328#L248 assume !(1 == isFloorCalling_~floorID); 1572329#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1578367#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1576181#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1574945#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1574946#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1572687#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1572688#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1577265#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1578422#L1938 assume !(0 != timeShift_~tmp___9~2); 1578423#L2029 assume !(1 == ~doorState~0); 1577636#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1577637#L1378 assume !(1 == stopRequestedInDirection_~dir); 1579966#L1547 assume !(0 == ~currentFloorID~0); 1579965#L1553 assume ~currentFloorID~0 > 0; 1575524#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1571919#L1568 assume ~currentFloorID~0 > 0; 1571920#L1570 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574326#L1571 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574416#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1580076#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1580077#L1754 assume !(1 == ~currentHeading~0); 1580687#L1764 assume !(0 == ~currentFloorID~0); 1580682#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1579860#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1580674#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1580671#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 1580669#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 1580663#L2947 assume !(1 == ~expectedDirection~0); 1580646#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1580645#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1580644#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1580643#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1580642#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1580641#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1580640#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1580639#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1580638#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1580634#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1580631#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1580632#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1580751#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1580750#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1580749#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1580745#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1580744#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1580743#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1580741#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1580740#L2029-3 assume !(1 == ~doorState~0); 1580739#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1580735#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1580722#L1547-2 assume !(0 == ~currentFloorID~0); 1580723#L1553-2 assume !(~currentFloorID~0 > 0); 1580759#L1568-2 assume ~currentFloorID~0 > 0; 1572554#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574340#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574422#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1582040#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1585820#L1754-3 assume !(1 == ~currentHeading~0); 1637350#L1764-9 assume !(0 == ~currentFloorID~0); 1581739#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1581735#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1657309#L2935-1 assume !(-1 == ~expectedDirection~0); 1657307#L2947-1 assume !(1 == ~expectedDirection~0); 1657301#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1657300#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1657299#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1657298#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1580352#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1657296#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1657294#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1657292#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1657290#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1657287#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1657286#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1657284#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1657283#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1657281#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 1657279#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1657274#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1657273#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1657272#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1657267#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1657265#L2029-6 assume !(1 == ~doorState~0); 1657264#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1657262#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1657209#L1547-4 assume !(0 == ~currentFloorID~0); 1657099#L1553-4 assume !(~currentFloorID~0 > 0); 1657100#L1568-4 assume ~currentFloorID~0 > 0; 1574303#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574304#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574335#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1656947#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1573443#L1754-6 assume !(1 == ~currentHeading~0); 1573444#L1764-18 assume !(0 == ~currentFloorID~0); 1577659#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1577631#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1620620#L2935-2 assume !(-1 == ~expectedDirection~0); 1620621#L2947-2 assume !(1 == ~expectedDirection~0); 1620616#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1619135#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1618704#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1618696#L515-1 assume 0 == initPersonOnFloor_~floor; 1618609#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1618561#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1618553#L307-2 assume !(0 == callOnFloor_~floorID); 1618554#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1704016#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1704015#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1704014#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1704013#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1689362#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1680704#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1680703#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1680701#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1680699#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1680698#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1680696#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1680695#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1680694#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1680692#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1680684#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1680681#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1680678#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1680676#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1680672#L1938-3 assume !(0 != timeShift_~tmp___9~2); 1680670#L2029-9 assume !(1 == ~doorState~0); 1680668#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1680666#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 1680648#L1547-6 assume !(0 == ~currentFloorID~0); 1680649#L1553-6 assume !(~currentFloorID~0 > 0); 1680865#L1568-6 assume ~currentFloorID~0 > 0; 1680866#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1693946#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1693927#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1693921#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1573472#L1754-9 assume !(1 == ~currentHeading~0); 1573473#L1764-27 assume !(0 == ~currentFloorID~0); 1577441#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1661436#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1717512#L2935-3 assume !(-1 == ~expectedDirection~0); 1717509#L2947-3 assume !(1 == ~expectedDirection~0); 1717506#L2948-3 cleanup_~i~3 := 0; 1717504#L2576-2 [2018-11-23 00:31:35,349 INFO L796 eck$LassoCheckResult]: Loop: 1717504#L2576-2 assume !false; 1717503#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1717502#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1717501#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 1717500#L2584 assume 1 != cleanup_~tmp___0~8; 1717499#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1717498#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1717497#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 1716742#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 1694861#L1286 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1694860#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1694858#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 1694856#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1694854#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1694852#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1694850#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1586088#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1676129#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1676122#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1676120#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1676117#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1676116#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1676114#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1676113#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1676112#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1676110#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1676107#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1676105#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1676103#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1676102#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1676100#L1938-4 assume !(0 != timeShift_~tmp___9~2); 1676098#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1676097#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1676095#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 1676096#L1547-8 assume !(0 == ~currentFloorID~0); 1679708#L1553-8 assume !(~currentFloorID~0 > 0); 1689419#L1568-8 assume ~currentFloorID~0 > 0; 1689420#L1570-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1574411#L1571-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1574412#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1696465#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1573396#L1754-12 assume !(1 == ~currentHeading~0); 1573397#L1764-36 assume !(0 == ~currentFloorID~0); 1577403#L1764-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1577399#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1717520#L2935-4 assume !(-1 == ~expectedDirection~0); 1717517#L2947-4 assume !(1 == ~expectedDirection~0); 1717505#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1717504#L2576-2 [2018-11-23 00:31:35,352 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:35,354 INFO L82 PathProgramCache]: Analyzing trace with hash -1091230284, now seen corresponding path program 1 times [2018-11-23 00:31:35,354 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:35,354 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:35,354 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:35,354 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:35,355 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:35,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:35,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:35,423 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:35,423 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:35,424 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:35,424 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:35,424 INFO L82 PathProgramCache]: Analyzing trace with hash 493574899, now seen corresponding path program 1 times [2018-11-23 00:31:35,424 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:35,424 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:35,424 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:35,424 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:35,424 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:35,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:35,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:35,445 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:35,445 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:31:35,445 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:35,445 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:31:35,445 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:31:35,445 INFO L87 Difference]: Start difference. First operand 148487 states and 277239 transitions. cyclomatic complexity: 128754 Second operand 5 states. [2018-11-23 00:31:38,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:38,182 INFO L93 Difference]: Finished difference Result 255334 states and 478409 transitions. [2018-11-23 00:31:38,183 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 00:31:38,183 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 255334 states and 478409 transitions. [2018-11-23 00:31:39,137 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 66428 [2018-11-23 00:31:39,669 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 255334 states to 254222 states and 476511 transitions. [2018-11-23 00:31:39,670 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 254222 [2018-11-23 00:31:39,788 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 254222 [2018-11-23 00:31:39,789 INFO L73 IsDeterministic]: Start isDeterministic. Operand 254222 states and 476511 transitions. [2018-11-23 00:31:39,884 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:39,884 INFO L705 BuchiCegarLoop]: Abstraction has 254222 states and 476511 transitions. [2018-11-23 00:31:39,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254222 states and 476511 transitions. [2018-11-23 00:31:41,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254222 to 147689. [2018-11-23 00:31:41,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 147689 states. [2018-11-23 00:31:41,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147689 states to 147689 states and 275449 transitions. [2018-11-23 00:31:41,212 INFO L728 BuchiCegarLoop]: Abstraction has 147689 states and 275449 transitions. [2018-11-23 00:31:41,212 INFO L608 BuchiCegarLoop]: Abstraction has 147689 states and 275449 transitions. [2018-11-23 00:31:41,212 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-23 00:31:41,213 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 147689 states and 275449 transitions. [2018-11-23 00:31:41,496 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 37278 [2018-11-23 00:31:41,497 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:41,497 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:41,500 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:41,500 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:41,501 INFO L794 eck$LassoCheckResult]: Stem: 1980528#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1980529#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 1978960#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 1978562#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 1978563#L2767 assume 0 != main_~tmp~19; 1980817#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1979266#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 1977941#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 1977885#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1978248#L515 assume 0 == initPersonOnFloor_~floor; 1977934#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1976193#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1978864#L307 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1978865#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1982983#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1982982#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1982981#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1982980#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1978828#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1978829#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 1979647#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1976932#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1976768#L244 assume !(0 == isFloorCalling_~floorID); 1976769#L248 assume !(1 == isFloorCalling_~floorID); 1983228#L252 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1982094#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1982095#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1983200#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1983199#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1983195#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1983193#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1983192#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1983190#L1938 assume !(0 != timeShift_~tmp___9~2); 1983189#L2029 assume !(1 == ~doorState~0); 1983188#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1983187#L1378 assume !(1 == stopRequestedInDirection_~dir); 1978592#L1547 assume !(0 == ~currentFloorID~0); 1978593#L1553 assume ~currentFloorID~0 > 0; 1979409#L1554 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1983182#L244-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1983181#L271-6 stopRequestedInDirection_#t~ret19 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1979281#L1558 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1976397#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 1983368#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1983363#L1754 assume !(1 == ~currentHeading~0); 1983362#L1764 assume !(0 == ~currentFloorID~0); 1983357#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1983356#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1983355#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1983347#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 1983348#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 1983344#L2947 assume !(1 == ~expectedDirection~0); 1983341#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1983340#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1983339#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 1983338#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1983336#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1983334#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1983332#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1983330#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1983328#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1983327#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1982238#L244-21 assume !(0 == isFloorCalling_~floorID); 1982240#L248-21 assume !(1 == isFloorCalling_~floorID); 1983323#L252-21 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1983318#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1983319#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1983315#L1191-21 assume !(0 == buttonForFloorIsPressed_~floorID); 1983316#L1195-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1983309#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1983310#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1983306#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 1983307#L1938-1 assume !(0 != timeShift_~tmp___9~2); 1983303#L2029-3 assume !(1 == ~doorState~0); 1983304#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1983300#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 1983301#L1547-2 assume !(0 == ~currentFloorID~0); 1984853#L1553-2 assume !(~currentFloorID~0 > 0); 1984851#L1568-2 assume ~currentFloorID~0 > 0; 1984852#L1570-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2037745#L1571-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2032948#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2032947#L2037-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2032945#L1754-3 assume !(1 == ~currentHeading~0); 2032943#L1764-9 assume !(0 == ~currentFloorID~0); 2009849#L1764-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1996970#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2009840#L2935-1 assume !(-1 == ~expectedDirection~0); 2009836#L2947-1 assume !(1 == ~expectedDirection~0); 2009824#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2009822#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2009820#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2009818#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1996957#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2009813#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2009810#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2009807#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2009803#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2009805#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2022082#L244-42 assume !(0 == isFloorCalling_~floorID); 2022081#L248-42 assume !(1 == isFloorCalling_~floorID); 2022078#L252-42 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2022073#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2022070#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2022071#L1191-32 assume !(0 == buttonForFloorIsPressed_~floorID); 2022077#L1195-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2022072#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2022069#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2022067#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2022066#L1938-2 assume !(0 != timeShift_~tmp___9~2); 1984611#L2029-6 assume !(1 == ~doorState~0); 1984612#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1983588#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 1983589#L1547-4 assume !(0 == ~currentFloorID~0); 2082274#L1553-4 assume !(~currentFloorID~0 > 0); 2082272#L1568-4 assume ~currentFloorID~0 > 0; 2082273#L1570-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1978294#L1571-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1978295#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2082142#L2037-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2088762#L1754-6 assume !(1 == ~currentHeading~0); 1993876#L1764-18 assume !(0 == ~currentFloorID~0); 1993869#L1764-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1993608#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2021189#L2935-2 assume !(-1 == ~expectedDirection~0); 2021183#L2947-2 assume !(1 == ~expectedDirection~0); 2021176#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 2021171#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2021166#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2021164#L515-1 assume 0 == initPersonOnFloor_~floor; 2021165#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2021127#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2021128#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2051281#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2051280#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2051279#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2051278#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1993481#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2051277#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2097377#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2097376#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2097375#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2097374#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2097373#L244-63 assume !(0 == isFloorCalling_~floorID); 2020585#L248-63 assume !(1 == isFloorCalling_~floorID); 2020582#L252-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2020579#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2020577#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2020576#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2020573#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2020569#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2020565#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2020562#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2020558#L1938-3 assume !(0 != timeShift_~tmp___9~2); 2020552#L2029-9 assume !(1 == ~doorState~0); 2020546#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2020531#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 2020532#L1547-6 assume !(0 == ~currentFloorID~0); 2020570#L1553-6 assume !(~currentFloorID~0 > 0); 2020567#L1568-6 assume ~currentFloorID~0 > 0; 2020568#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2071108#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2070454#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2070682#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2070681#L1754-9 assume !(1 == ~currentHeading~0); 1992581#L1764-27 assume !(0 == ~currentFloorID~0); 1992451#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1992426#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2042498#L2935-3 assume !(-1 == ~expectedDirection~0); 2042493#L2947-3 assume !(1 == ~expectedDirection~0); 2042486#L2948-3 cleanup_~i~3 := 0; 2042484#L2576-2 [2018-11-23 00:31:41,501 INFO L796 eck$LassoCheckResult]: Loop: 2042484#L2576-2 assume !false; 2042483#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2042482#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2042481#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 2042480#L2584 assume 1 != cleanup_~tmp___0~8; 2042479#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2042478#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2042477#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 2042476#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 2042475#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 2042474#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 2042473#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2042472#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2042471#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2042470#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1992375#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2042469#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2099116#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2099115#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2099114#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2099113#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2099112#L244-89 assume !(0 == isFloorCalling_~floorID); 2040230#L248-89 assume !(1 == isFloorCalling_~floorID); 2040226#L252-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2039844#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2039845#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1984657#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1984658#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1984647#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1984648#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2027726#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2027727#L1938-4 assume !(0 != timeShift_~tmp___9~2); 2027719#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2027720#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2027707#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 2027708#L1547-8 assume !(0 == ~currentFloorID~0); 2060665#L1553-8 assume !(~currentFloorID~0 > 0); 2066445#L1568-8 assume ~currentFloorID~0 > 0; 2066444#L1570-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2060590#L1571-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2060367#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2060352#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2060348#L1754-12 assume !(1 == ~currentHeading~0); 1993148#L1764-36 assume !(0 == ~currentFloorID~0); 1992442#L1764-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1992418#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2042495#L2935-4 assume !(-1 == ~expectedDirection~0); 2042488#L2947-4 assume !(1 == ~expectedDirection~0); 2042485#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 2042484#L2576-2 [2018-11-23 00:31:41,510 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:41,510 INFO L82 PathProgramCache]: Analyzing trace with hash 1960856288, now seen corresponding path program 1 times [2018-11-23 00:31:41,510 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:41,510 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:41,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:41,511 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:41,511 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:41,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:41,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:41,573 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:41,573 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:41,574 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:41,574 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:41,574 INFO L82 PathProgramCache]: Analyzing trace with hash -528016041, now seen corresponding path program 1 times [2018-11-23 00:31:41,574 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:41,574 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:41,575 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:41,575 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:41,575 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:41,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:41,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:41,614 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:41,614 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 00:31:41,614 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:41,614 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 00:31:41,614 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:31:41,614 INFO L87 Difference]: Start difference. First operand 147689 states and 275449 transitions. cyclomatic complexity: 127764 Second operand 7 states. [2018-11-23 00:31:45,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:45,628 INFO L93 Difference]: Finished difference Result 284483 states and 525774 transitions. [2018-11-23 00:31:45,628 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 00:31:45,629 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 284483 states and 525774 transitions. [2018-11-23 00:31:46,493 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 71795 [2018-11-23 00:31:47,166 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 284483 states to 284483 states and 525774 transitions. [2018-11-23 00:31:47,166 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 284483 [2018-11-23 00:31:47,341 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 284483 [2018-11-23 00:31:47,341 INFO L73 IsDeterministic]: Start isDeterministic. Operand 284483 states and 525774 transitions. [2018-11-23 00:31:47,467 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:31:47,467 INFO L705 BuchiCegarLoop]: Abstraction has 284483 states and 525774 transitions. [2018-11-23 00:31:47,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284483 states and 525774 transitions. [2018-11-23 00:31:53,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284483 to 196573. [2018-11-23 00:31:53,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196573 states. [2018-11-23 00:31:53,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196573 states to 196573 states and 366981 transitions. [2018-11-23 00:31:53,400 INFO L728 BuchiCegarLoop]: Abstraction has 196573 states and 366981 transitions. [2018-11-23 00:31:53,400 INFO L608 BuchiCegarLoop]: Abstraction has 196573 states and 366981 transitions. [2018-11-23 00:31:53,400 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-23 00:31:53,400 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 196573 states and 366981 transitions. [2018-11-23 00:31:53,772 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 50362 [2018-11-23 00:31:53,772 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:31:53,772 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:31:53,776 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:53,776 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:31:53,777 INFO L794 eck$LassoCheckResult]: Stem: 2412801#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2412802#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 2411203#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 2410797#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 2410798#L2767 assume 0 != main_~tmp~19; 2413098#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2411508#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 2410148#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2410090#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2410471#L515 assume 0 == initPersonOnFloor_~floor; 2410141#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2408397#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2411106#L307 assume !(0 == callOnFloor_~floorID); 2410873#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2410858#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2411836#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2409471#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2409472#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2410708#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2410709#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2408742#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 2408743#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2409143#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2414874#L244 assume !(0 == isFloorCalling_~floorID); 2414873#L248 assume !(1 == isFloorCalling_~floorID); 2414872#L252 assume !(2 == isFloorCalling_~floorID); 2414870#L256 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2414869#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2414868#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2414867#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2414866#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2414862#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2414861#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2414860#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2414859#L1938 assume !(0 != timeShift_~tmp___9~2); 2414858#L2029 assume !(1 == ~doorState~0); 2414857#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2414855#L1378 assume !(1 == stopRequestedInDirection_~dir); 2414856#L1547 assume !(0 == ~currentFloorID~0); 2415079#L1553 assume ~currentFloorID~0 > 0; 2415076#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 2415074#L1568 assume ~currentFloorID~0 > 0; 2415069#L1570 assume !(0 != stopRequestedInDirection_~respectInLiftCalls); 2415065#L1581 assume !(~currentFloorID~0 > 1); 2415061#L1597 assume ~currentFloorID~0 > 1; 2415060#L1599 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2415059#L1600 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2414743#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2414621#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2414614#L1754 assume !(1 == ~currentHeading~0); 2414607#L1764 assume !(0 == ~currentFloorID~0); 2414602#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2414598#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2414594#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2414592#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 2414590#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2414582#L2947 assume !(1 == ~expectedDirection~0); 2414581#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2414578#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2414575#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2414574#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2414569#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2414565#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2414560#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2414554#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2414551#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2414549#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2414547#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2414546#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2414545#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2414544#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2414543#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2414541#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2414540#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2414538#L1938-1 assume !(0 != timeShift_~tmp___9~2); 2414537#L2029-3 assume !(1 == ~doorState~0); 2414536#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2414534#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 2414535#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2414532#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2416676#L2037-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 2416573#L1809-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 2416672#L1814-2 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2416665#L1378-3 assume !(1 == stopRequestedInDirection_~dir); 2416619#L1547-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2416577#L1700-3 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2416574#L2046-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2416571#L1754-5 assume !(1 == ~currentHeading~0); 2416569#L1764-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2416565#L1764-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2416563#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2452655#L2935-1 assume !(-1 == ~expectedDirection~0); 2452648#L2947-1 assume !(1 == ~expectedDirection~0); 2452645#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2452643#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2452641#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2452639#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2452378#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2452376#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2452318#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2452307#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2452239#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2452228#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2452226#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2452225#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2452224#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2452223#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2452222#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2452220#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2452219#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2452218#L1938-2 assume !(0 != timeShift_~tmp___9~2); 2452217#L2029-6 assume !(1 == ~doorState~0); 2452216#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2452214#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 2452215#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2452176#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2452574#L2037-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 2452151#L1809-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 2452572#L1814-4 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2452568#L1378-5 assume !(1 == stopRequestedInDirection_~dir); 2452334#L1547-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2452317#L1700-5 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2452305#L2046-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2452159#L1754-8 assume !(1 == ~currentHeading~0); 2452147#L1764-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2452021#L1764-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2452016#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2452013#L2935-2 assume !(-1 == ~expectedDirection~0); 2452011#L2947-2 assume !(1 == ~expectedDirection~0); 2452004#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 2451999#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2451880#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2451863#L515-1 assume 0 == initPersonOnFloor_~floor; 2451698#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2451681#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2451558#L307-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2451553#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2451548#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2451541#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2451510#L2804-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2451401#L2805-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2444088#L1191-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2451389#L1212-33 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 2439274#L2809-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 2439267#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2439266#L244-63 assume !(0 == isFloorCalling_~floorID); 2431508#L248-63 assume !(1 == isFloorCalling_~floorID); 2439265#L252-63 assume !(2 == isFloorCalling_~floorID); 2439264#L256-63 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2439262#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2439261#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2439260#L1191-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2439257#L1195-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2439255#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2439253#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2439252#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2439250#L1938-3 assume !(0 != timeShift_~tmp___9~2); 2439249#L2029-9 assume !(1 == ~doorState~0); 2439248#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2439246#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 2439247#L1547-6 assume !(0 == ~currentFloorID~0); 2439757#L1553-6 assume !(~currentFloorID~0 > 0); 2439755#L1568-6 assume ~currentFloorID~0 > 0; 2439756#L1570-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2601773#L1571-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2601417#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2601414#L2037-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2601412#L1754-9 assume !(1 == ~currentHeading~0); 2454825#L1764-27 assume !(0 == ~currentFloorID~0); 2422131#L1764-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2422128#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2422126#L2935-3 assume !(-1 == ~expectedDirection~0); 2422124#L2947-3 assume !(1 == ~expectedDirection~0); 2420584#L2948-3 cleanup_~i~3 := 0; 2420582#L2576-2 [2018-11-23 00:31:53,777 INFO L796 eck$LassoCheckResult]: Loop: 2420582#L2576-2 assume !false; 2420581#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2420580#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2420575#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 2420573#L2584 assume 1 != cleanup_~tmp___0~8; 2420490#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2420489#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2420487#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 2420473#L1282 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 2420467#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 2420462#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 2420446#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2420423#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2420415#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2420204#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2420199#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2420194#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2420177#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2420168#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2420159#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2420161#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2425958#L244-89 assume !(0 == isFloorCalling_~floorID); 2425959#L248-89 assume !(1 == isFloorCalling_~floorID); 2457646#L252-89 assume !(2 == isFloorCalling_~floorID); 2457645#L256-89 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2457643#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2457642#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2457641#L1191-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2457633#L1195-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2457630#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2457628#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2457627#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2457620#L1938-4 assume !(0 != timeShift_~tmp___9~2); 2415477#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2415478#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2415469#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 2415470#L1547-8 assume !(0 == ~currentFloorID~0); 2491908#L1553-8 assume !(~currentFloorID~0 > 0); 2491905#L1568-8 assume ~currentFloorID~0 > 0; 2491906#L1570-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2568203#L1571-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2568195#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2568167#L2037-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2568165#L1754-12 assume !(1 == ~currentHeading~0); 2454475#L1764-36 assume !(0 == ~currentFloorID~0); 2420602#L1764-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2420597#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2420594#L2935-4 assume !(-1 == ~expectedDirection~0); 2420592#L2947-4 assume !(1 == ~expectedDirection~0); 2420583#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 2420582#L2576-2 [2018-11-23 00:31:53,788 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:53,788 INFO L82 PathProgramCache]: Analyzing trace with hash 1151611525, now seen corresponding path program 1 times [2018-11-23 00:31:53,788 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:53,788 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:53,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:53,789 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:53,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:53,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:53,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:53,830 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:53,830 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:31:53,831 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:31:53,831 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:31:53,831 INFO L82 PathProgramCache]: Analyzing trace with hash 1904962438, now seen corresponding path program 1 times [2018-11-23 00:31:53,831 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:31:53,831 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:31:53,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:53,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:31:53,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:31:53,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:31:53,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:31:53,894 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:31:53,894 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 00:31:53,894 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-23 00:31:53,894 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 00:31:53,894 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-23 00:31:53,894 INFO L87 Difference]: Start difference. First operand 196573 states and 366981 transitions. cyclomatic complexity: 170412 Second operand 7 states. [2018-11-23 00:31:57,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:31:57,612 INFO L93 Difference]: Finished difference Result 345317 states and 639274 transitions. [2018-11-23 00:31:57,613 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 00:31:57,613 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 345317 states and 639274 transitions. [2018-11-23 00:31:59,354 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 87806 [2018-11-23 00:32:00,029 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 345317 states to 345317 states and 639274 transitions. [2018-11-23 00:32:00,029 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 345317 [2018-11-23 00:32:00,234 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 345317 [2018-11-23 00:32:00,234 INFO L73 IsDeterministic]: Start isDeterministic. Operand 345317 states and 639274 transitions. [2018-11-23 00:32:00,384 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:32:00,384 INFO L705 BuchiCegarLoop]: Abstraction has 345317 states and 639274 transitions. [2018-11-23 00:32:00,572 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345317 states and 639274 transitions. [2018-11-23 00:32:03,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345317 to 245067. [2018-11-23 00:32:03,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 245067 states. [2018-11-23 00:32:03,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245067 states to 245067 states and 457819 transitions. [2018-11-23 00:32:03,336 INFO L728 BuchiCegarLoop]: Abstraction has 245067 states and 457819 transitions. [2018-11-23 00:32:03,336 INFO L608 BuchiCegarLoop]: Abstraction has 245067 states and 457819 transitions. [2018-11-23 00:32:03,336 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-23 00:32:03,336 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 245067 states and 457819 transitions. [2018-11-23 00:32:03,760 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 63340 [2018-11-23 00:32:03,760 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-23 00:32:03,760 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-23 00:32:03,762 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:32:03,762 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:32:03,762 INFO L794 eck$LassoCheckResult]: Stem: 2954716#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string50.base, #t~string50.offset := #Ultimate.alloc(10);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string52.base, #t~string52.offset, 1);call write~init~int(95, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(93, #t~string52.base, 2 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 3 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(32, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string56.base, #t~string56.offset, 1);call write~init~int(97, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(116, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 3 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 4 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string58.base, #t~string58.offset, 1);call write~init~int(105, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.alloc(10);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string62.base, #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string64.base, #t~string64.offset, 1);call write~init~int(111, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(119, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 3 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 4 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string66.base, #t~string66.offset, 1);call write~init~int(73, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(76, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(95, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(112, #t~string66.base, 4 + #t~string66.offset, 1);call write~init~int(58, #t~string66.base, 5 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 6 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(37, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(105, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 3 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(70, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(95, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(112, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(58, #t~string78.base, 4 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 5 + #t~string78.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(37, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(105, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 3 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string95.base, #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 1 + #t~string95.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(30);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(9);call #t~string146.base, #t~string146.offset := #Ultimate.alloc(21);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(30);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(9);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(21);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(30);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(9);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(25);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(30);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(9);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2954717#L-1 havoc main_#res;havoc main_#t~ret111, main_~retValue_acc~22, main_~tmp~19;havoc main_~retValue_acc~22;havoc main_~tmp~19; 2953097#L2420 havoc valid_product_#res;havoc valid_product_~retValue_acc~20;havoc valid_product_~retValue_acc~20;valid_product_~retValue_acc~20 := 1;valid_product_#res := valid_product_~retValue_acc~20; 2952684#L2428 main_#t~ret111 := valid_product_#res;main_~tmp~19 := main_#t~ret111;havoc main_#t~ret111; 2952685#L2767 assume 0 != main_~tmp~19; 2955010#L2744 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2953417#L237 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 2952030#L868 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2951968#L893 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2952372#L515 assume 0 == initPersonOnFloor_~floor; 2952023#L516 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2950324#L623-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2952998#L307 assume !(0 == callOnFloor_~floorID); 2952762#L310 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2952747#L319-2 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2956751#L1174 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2956750#L1226 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2956749#L2804 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2956748#L2866 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2956747#L1191-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2956742#L1212-5 __utac_acc__Specification3_spec__1_#t~ret119 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119; 2956740#L2870 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2951078#L2910 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2956958#L244 assume !(0 == isFloorCalling_~floorID); 2956957#L248 assume !(1 == isFloorCalling_~floorID); 2956956#L252 assume !(2 == isFloorCalling_~floorID); 2956955#L256 assume !(3 == isFloorCalling_~floorID); 2956954#L260 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~0 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2956953#L271 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2956952#L1787 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2956951#L1191-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2956950#L1195-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2956946#L1212-10 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2956944#L1794 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2956943#L1799 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2956942#L1938 assume !(0 != timeShift_~tmp___9~2); 2956941#L2029 assume !(1 == ~doorState~0); 2956940#L2029-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2956938#L1378 assume !(1 == stopRequestedInDirection_~dir); 2956939#L1547 assume !(0 == ~currentFloorID~0); 2956936#L1553 assume ~currentFloorID~0 > 0; 2956930#L1554 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 2956925#L1568 assume ~currentFloorID~0 > 0; 2956912#L1570 assume !(0 != stopRequestedInDirection_~respectInLiftCalls); 2956908#L1581 assume !(~currentFloorID~0 > 1); 2956882#L1597 assume ~currentFloorID~0 > 1; 2956886#L1599 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2956868#L1600 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2956855#L1700 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2956618#L2037 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2956612#L1754 assume !(1 == ~currentHeading~0); 2956604#L1764 assume !(0 == ~currentFloorID~0); 2956597#L1764-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2956592#L1770-5 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2956586#L2935 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2956580#L1226-1 __utac_acc__Specification3_spec__2_#t~ret124 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~11 := __utac_acc__Specification3_spec__2_#t~ret124;havoc __utac_acc__Specification3_spec__2_#t~ret124; 2956578#L2939 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11); 2956564#L2947 assume !(1 == ~expectedDirection~0); 2956561#L2948 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2956557#L1174-1 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2956554#L1226-3 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2956551#L2804-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2956546#L2866-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2956540#L2876-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2956534#L2887-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2956528#L2898-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2956526#L2909-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2956524#L2910-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2956522#L244-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2956521#L271-21 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2956520#L1787-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2956519#L1191-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2956518#L1212-21 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2956516#L1794-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2956515#L1799-1 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2956513#L1938-1 assume !(0 != timeShift_~tmp___9~2); 2956512#L2029-3 assume !(1 == ~doorState~0); 2956511#L2029-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2956509#L1378-2 assume !(1 == stopRequestedInDirection_~dir); 2956510#L1547-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2956507#L1700-2 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2969159#L2037-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 2969156#L1809-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 2969154#L1814-2 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2969153#L1378-3 assume !(1 == stopRequestedInDirection_~dir); 2969098#L1547-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2969093#L1700-3 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2969091#L2046-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2969089#L1754-5 assume !(1 == ~currentHeading~0); 2969086#L1764-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2969082#L1764-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2969080#L1770-11 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2969079#L2935-1 assume !(-1 == ~expectedDirection~0); 2969073#L2947-1 assume !(1 == ~expectedDirection~0); 2968577#L2948-1 havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2968464#L1174-2 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2968460#L1226-6 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2968096#L2804-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2968069#L2866-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2968064#L2876-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2968060#L2887-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2968056#L2898-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2968031#L2909-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2968023#L2910-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2968021#L244-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2968018#L271-42 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2968014#L1787-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2968016#L1191-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2968019#L1212-32 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2968017#L1794-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2968002#L1799-2 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2968003#L1938-2 assume !(0 != timeShift_~tmp___9~2); 2969266#L2029-6 assume !(1 == ~doorState~0); 2969265#L2029-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2969263#L1378-4 assume !(1 == stopRequestedInDirection_~dir); 2969258#L1547-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2969253#L1700-4 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 2968884#L2037-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 2968883#L1809-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 2968882#L1814-4 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2968881#L1378-5 assume !(1 == stopRequestedInDirection_~dir); 2968826#L1547-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2968821#L1700-5 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2968820#L2046-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2968818#L1754-8 assume !(1 == ~currentHeading~0); 2968806#L1764-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2968802#L1764-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2968799#L1770-17 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2968797#L2935-2 assume !(-1 == ~expectedDirection~0); 2968795#L2947-2 assume !(1 == ~expectedDirection~0); 2968786#L2948-2 havoc bobCall_#t~ret99, bobCall_~tmp~11;havoc bobCall_~tmp~11;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 2968782#L868-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2968777#L893-1 bobCall_#t~ret99 := getOrigin_#res;bobCall_~tmp~11 := bobCall_#t~ret99;havoc bobCall_#t~ret99;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~11;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2968775#L515-1 assume 0 == initPersonOnFloor_~floor; 2968734#L516-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2968647#L623-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2968614#L307-2 assume !(0 == callOnFloor_~floorID); 2968603#L310-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2968600#L319-5 havoc cleanup_#t~ret105, cleanup_#t~ret106, cleanup_~i~3, cleanup_~tmp~17, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~17;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2968598#L1174-3 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2968597#L1226-9 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 2968595#L2804-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2968590#L2866-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2968588#L2876-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2968585#L2887-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2968579#L2898-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2968489#L2909-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2958670#L2910-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2958668#L244-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2958666#L271-63 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2958665#L1787-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2958664#L1191-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2958663#L1212-43 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2958661#L1794-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2958660#L1799-3 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 2958658#L1938-3 assume !(0 != timeShift_~tmp___9~2); 2958656#L2029-9 assume !(1 == ~doorState~0); 2958657#L2029-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2958651#L1378-6 assume !(1 == stopRequestedInDirection_~dir); 2958652#L1547-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2958647#L1700-6 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 3037242#L2037-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 3032033#L1809-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 3037227#L1814-6 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3037222#L1378-7 assume !(1 == stopRequestedInDirection_~dir); 3037185#L1547-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3037169#L1700-7 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3031882#L2046-3 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3031883#L1754-11 assume !(1 == ~currentHeading~0); 3032015#L1764-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3031864#L1764-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3031787#L1770-23 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3003791#L2935-3 assume !(-1 == ~expectedDirection~0); 3003738#L2947-3 assume !(1 == ~expectedDirection~0); 3003722#L2948-3 cleanup_~i~3 := 0; 3003719#L2576-2 [2018-11-23 00:32:03,767 INFO L796 eck$LassoCheckResult]: Loop: 3003719#L2576-2 assume !false; 3003717#L2577 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3003715#L2580 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 3003713#L1025 cleanup_#t~ret105 := isBlocked_#res;cleanup_~tmp___0~8 := cleanup_#t~ret105;havoc cleanup_#t~ret105; 3003710#L2584 assume 1 != cleanup_~tmp___0~8; 3003711#L2584-1 havoc isIdle_#res;havoc isIdle_#t~ret12, isIdle_~retValue_acc~13, isIdle_~tmp~4;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret7, anyStopRequested_#t~ret8, anyStopRequested_#t~ret9, anyStopRequested_#t~ret10, anyStopRequested_#t~ret11, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3006474#L244-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3006473#L271-84 anyStopRequested_#t~ret7 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret7;havoc anyStopRequested_#t~ret7; 3006472#L1282 assume !(0 != anyStopRequested_~tmp___3~0); 3006471#L1286 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3003637#L244-85 assume !(0 == isFloorCalling_~floorID); 3003638#L248-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3003613#L271-85 anyStopRequested_#t~ret8 := isFloorCalling_#res;anyStopRequested_~tmp___2~0 := anyStopRequested_#t~ret8;havoc anyStopRequested_#t~ret8; 3003614#L1293 assume 0 != anyStopRequested_~tmp___2~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 3030495#L1346 isIdle_#t~ret12 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret12;havoc isIdle_#t~ret12;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 3003952#L1359 cleanup_#t~ret106 := isIdle_#res;cleanup_~tmp~17 := cleanup_#t~ret106;havoc cleanup_#t~ret106; 3003891#L2596 assume !(0 != cleanup_~tmp~17);havoc timeShift_#t~ret39, timeShift_#t~ret40, timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_~tmp~9, timeShift_~tmp___0~6, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~9;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~20, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~20;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 3003887#L1174-4 __utac_acc__Specification3_spec__1_#t~ret112 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~20 := __utac_acc__Specification3_spec__1_#t~ret112;havoc __utac_acc__Specification3_spec__1_#t~ret112;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~20;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 3003883#L1226-12 __utac_acc__Specification3_spec__1_#t~ret113 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret113;havoc __utac_acc__Specification3_spec__1_#t~ret113; 3003877#L2804-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3003869#L2866-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3003859#L2876-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3003847#L2887-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3003838#L2898-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3003831#L2909-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3003708#L2910-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~7, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~7;havoc stopRequestedAtCurrentFloor_~tmp___0~4;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3003706#L244-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3003705#L271-89 stopRequestedAtCurrentFloor_#t~ret25 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3003704#L1787-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~4);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 3003701#L1191-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 3003695#L1212-54 stopRequestedAtCurrentFloor_#t~ret26 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~7 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3003687#L1794-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~7);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3003681#L1799-4 timeShift_#t~ret39 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret39;havoc timeShift_#t~ret39; 3003663#L1938-4 assume !(0 != timeShift_~tmp___9~2); 3003660#L2029-12 assume 1 == ~doorState~0;~doorState~0 := 0; 3003661#L2029-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3003650#L1378-8 assume !(1 == stopRequestedInDirection_~dir); 3003651#L1547-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3003630#L1700-8 timeShift_#t~ret46 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret46;havoc timeShift_#t~ret46; 3030096#L2037-4 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 3030094#L1809-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 3030092#L1814-8 timeShift_#t~ret47 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret47;havoc timeShift_#t~ret47;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret13, stopRequestedInDirection_#t~ret14, stopRequestedInDirection_#t~ret15, stopRequestedInDirection_#t~ret16, stopRequestedInDirection_#t~ret17, stopRequestedInDirection_#t~ret18, stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_#t~ret23, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~3, stopRequestedInDirection_~tmp___1~3, stopRequestedInDirection_~tmp___2~1, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~3;havoc stopRequestedInDirection_~tmp___1~3;havoc stopRequestedInDirection_~tmp___2~1;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3030089#L1378-9 assume !(1 == stopRequestedInDirection_~dir); 3029669#L1547-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3029657#L1700-9 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3029655#L2046-4 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret24, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3029510#L1754-14 assume !(1 == ~currentHeading~0); 3029509#L1764-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3029507#L1764-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3003784#L1770-29 havoc __utac_acc__Specification3_spec__2_#t~ret124, __utac_acc__Specification3_spec__2_#t~ret125, __utac_acc__Specification3_spec__2_~tmp~21, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~21;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3003741#L2935-4 assume !(-1 == ~expectedDirection~0); 3003737#L2947-4 assume !(1 == ~expectedDirection~0); 3003721#L2948-4 cleanup_~i~3 := 1 + cleanup_~i~3; 3003719#L2576-2 [2018-11-23 00:32:03,774 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:32:03,774 INFO L82 PathProgramCache]: Analyzing trace with hash 1803892980, now seen corresponding path program 1 times [2018-11-23 00:32:03,774 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:32:03,774 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:32:03,775 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:32:03,775 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:32:03,775 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:32:03,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:32:03,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:32:03,822 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:32:03,822 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 00:32:03,822 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-23 00:32:03,822 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:32:03,822 INFO L82 PathProgramCache]: Analyzing trace with hash -1940271930, now seen corresponding path program 1 times [2018-11-23 00:32:03,822 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:32:03,822 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:32:03,823 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:32:03,823 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:32:03,823 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:32:03,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:32:03,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:32:04,283 WARN L180 SmtUtils]: Spent 417.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 170 [2018-11-23 00:32:04,629 WARN L180 SmtUtils]: Spent 336.00 ms on a formula simplification. DAG size of input: 139 DAG size of output: 134 [2018-11-23 00:32:04,637 INFO L216 LassoAnalysis]: Preferences: [2018-11-23 00:32:04,638 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-23 00:32:04,638 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-23 00:32:04,638 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-23 00:32:04,638 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-23 00:32:04,638 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:04,639 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-23 00:32:04,639 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-23 00:32:04,639 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product09_true-unreach-call_true-termination.cil.c_Iteration17_Loop [2018-11-23 00:32:04,639 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-23 00:32:04,639 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-23 00:32:04,663 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,684 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,931 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,977 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:04,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:05,423 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-23 00:32:05,424 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:05,435 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 00:32:05,436 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 00:32:05,443 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 00:32:05,443 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret24=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:05,461 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 00:32:05,461 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 00:32:05,468 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 00:32:05,468 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:05,491 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 00:32:05,491 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 00:32:05,495 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-23 00:32:05,495 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret14=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret14=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:05,513 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-23 00:32:05,513 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c2b2ea7e-54d1-41dd-ba72-72673aa24320/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:05,559 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-23 00:32:05,559 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-23 00:32:17,615 INFO L450 LassoAnalysis]: Proving nontermination failed: SMT Solver returned 'unknown'. [2018-11-23 00:32:17,618 INFO L216 LassoAnalysis]: Preferences: [2018-11-23 00:32:17,618 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-23 00:32:17,618 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-23 00:32:17,618 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-23 00:32:17,618 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-23 00:32:17,618 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-23 00:32:17,618 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-23 00:32:17,618 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-23 00:32:17,619 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product09_true-unreach-call_true-termination.cil.c_Iteration17_Loop [2018-11-23 00:32:17,619 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-23 00:32:17,619 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-23 00:32:17,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,647 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,648 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,656 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,657 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,658 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,665 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,671 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,674 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,676 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,700 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,879 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,934 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,938 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,942 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:17,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:18,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-23 00:32:20,510 WARN L180 SmtUtils]: Spent 2.15 s on a formula simplification that was a NOOP. DAG size: 1 [2018-11-23 00:32:20,597 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-23 00:32:20,602 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-23 00:32:20,603 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 00:32:20,605 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 00:32:20,605 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 00:32:20,606 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 00:32:20,606 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 00:32:20,606 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 00:32:20,607 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 00:32:20,607 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 00:32:20,609 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 00:32:20,609 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 00:32:20,610 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 00:32:20,610 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 00:32:20,610 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 00:32:20,610 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 00:32:20,610 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 00:32:20,610 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 00:32:20,610 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 00:32:20,611 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 00:32:20,611 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 00:32:20,611 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 00:32:20,611 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 00:32:20,611 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 00:32:20,611 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 00:32:20,611 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 00:32:20,612 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 00:32:20,612 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 00:32:20,612 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 00:32:20,613 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 00:32:20,613 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 00:32:20,613 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 00:32:20,613 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 00:32:20,613 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 00:32:20,613 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 00:32:20,614 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 00:32:20,614 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 00:32:20,614 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 00:32:20,615 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 00:32:20,615 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 00:32:20,615 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 00:32:20,615 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 00:32:20,615 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 00:32:20,615 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 00:32:20,616 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 00:32:20,616 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 00:32:20,616 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-23 00:32:20,616 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-23 00:32:20,617 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-23 00:32:20,617 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-23 00:32:20,617 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-23 00:32:20,617 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-23 00:32:20,617 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-23 00:32:20,618 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-23 00:32:20,618 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-23 00:32:20,621 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-23 00:32:20,624 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-23 00:32:20,624 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-23 00:32:20,626 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-23 00:32:20,626 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-23 00:32:20,626 INFO L518 LassoAnalysis]: Proved termination. [2018-11-23 00:32:20,627 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-23 00:32:20,632 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-23 00:32:20,679 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:32:20,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:32:20,858 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:32:20,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:32:20,912 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:32:20,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:32:20,999 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-23 00:32:21,000 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 245067 states and 457819 transitions. cyclomatic complexity: 212756 Second operand 5 states. [2018-11-23 00:32:22,612 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 245067 states and 457819 transitions. cyclomatic complexity: 212756. Second operand 5 states. Result 308407 states and 575503 transitions. Complement of second has 8 states. [2018-11-23 00:32:22,613 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-23 00:32:22,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 00:32:22,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10323 transitions. [2018-11-23 00:32:22,624 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10323 transitions. Stem has 175 letters. Loop has 53 letters. [2018-11-23 00:32:22,626 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 00:32:22,626 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10323 transitions. Stem has 228 letters. Loop has 53 letters. [2018-11-23 00:32:22,628 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 00:32:22,628 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10323 transitions. Stem has 175 letters. Loop has 106 letters. [2018-11-23 00:32:22,629 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-23 00:32:22,630 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 308407 states and 575503 transitions. [2018-11-23 00:32:23,544 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-23 00:32:23,545 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 308407 states to 0 states and 0 transitions. [2018-11-23 00:32:23,545 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-23 00:32:23,545 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-23 00:32:23,545 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-23 00:32:23,545 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:32:23,545 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 00:32:23,545 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 00:32:23,545 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 00:32:23,545 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 00:32:23,545 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-23 00:32:23,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:32:23,545 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-23 00:32:23,545 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-23 00:32:23,545 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-23 00:32:23,546 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-23 00:32:23,546 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-23 00:32:23,546 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-23 00:32:23,546 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L442 BuchiCegarLoop]: ======== Iteration 18============ [2018-11-23 00:32:23,546 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-23 00:32:23,546 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-23 00:32:23,546 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-23 00:32:23,550 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 23.11 12:32:23 BoogieIcfgContainer [2018-11-23 00:32:23,550 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-23 00:32:23,551 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 00:32:23,551 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 00:32:23,551 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 00:32:23,551 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:30:54" (3/4) ... [2018-11-23 00:32:23,554 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 00:32:23,554 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 00:32:23,555 INFO L168 Benchmark]: Toolchain (without parser) took 95960.19 ms. Allocated memory was 1.0 GB in the beginning and 6.1 GB in the end (delta: 5.0 GB). Free memory was 955.5 MB in the beginning and 3.8 GB in the end (delta: -2.8 GB). Peak memory consumption was 2.2 GB. Max. memory is 11.5 GB. [2018-11-23 00:32:23,556 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:32:23,556 INFO L168 Benchmark]: CACSL2BoogieTranslator took 595.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.6 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -160.4 MB). Peak memory consumption was 57.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:32:23,557 INFO L168 Benchmark]: Boogie Procedure Inliner took 181.80 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 59.1 MB). Peak memory consumption was 59.1 MB. Max. memory is 11.5 GB. [2018-11-23 00:32:23,557 INFO L168 Benchmark]: Boogie Preprocessor took 201.91 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 56.4 MB). Peak memory consumption was 56.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:32:23,557 INFO L168 Benchmark]: RCFGBuilder took 5552.42 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 345.0 MB). Free memory was 1.0 GB in the beginning and 997.7 MB in the end (delta: 2.7 MB). Peak memory consumption was 347.7 MB. Max. memory is 11.5 GB. [2018-11-23 00:32:23,558 INFO L168 Benchmark]: BuchiAutomizer took 89421.68 ms. Allocated memory was 1.5 GB in the beginning and 6.1 GB in the end (delta: 4.5 GB). Free memory was 997.7 MB in the beginning and 3.8 GB in the end (delta: -2.8 GB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. [2018-11-23 00:32:23,558 INFO L168 Benchmark]: Witness Printer took 3.93 ms. Allocated memory is still 6.1 GB. Free memory is still 3.8 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:32:23,561 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 595.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.6 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -160.4 MB). Peak memory consumption was 57.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 181.80 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 59.1 MB). Peak memory consumption was 59.1 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 201.91 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 56.4 MB). Peak memory consumption was 56.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5552.42 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 345.0 MB). Free memory was 1.0 GB in the beginning and 997.7 MB in the end (delta: 2.7 MB). Peak memory consumption was 347.7 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 89421.68 ms. Allocated memory was 1.5 GB in the beginning and 6.1 GB in the end (delta: 4.5 GB). Free memory was 997.7 MB in the beginning and 3.8 GB in the end (delta: -2.8 GB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. * Witness Printer took 3.93 ms. Allocated memory is still 6.1 GB. Free memory is still 3.8 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 18 terminating modules (17 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 17 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 89.3s and 18 iterations. TraceHistogramMax:1. Analysis of lassos took 18.9s. Construction of modules took 18.9s. Büchi inclusion checks took 14.9s. Highest rank in rank-based complementation 3. Minimization of det autom 18. Minimization of nondet autom 0. Automata minimization 17.7s AutomataMinimizationTime, 16 MinimizatonAttempts, 711897 StatesRemovedByMinimization, 16 NontrivialMinimizations. Non-live state removal took 14.1s Buchi closure took 1.1s. Biggest automaton had 245067 states and ocurred in iteration 16. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 344043 SDtfs, 683813 SDslu, 696019 SDs, 0 SdLazy, 42843 SolverSat, 4546 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 18.9s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI16 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf348 smp46 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 6ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 3 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 0 LassoNonterminationAnalysisUnknown: 1 LassoNonterminationAnalysisTime: 12.1s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...